CVE-2020-37046 — AI Deep Analysis Summary

🚨 **Cross-Site Request Forgery (CSRF) Vulnerability**. Attackers can forge requests to add admin accounts without user knowledge. Impact: **Privilege Escalation + Backdoor Account**.

🔍 **Root Cause: Missing CSRF Token Validation**. CWE-352. The `tambahuser.php` endpoint does not validate request origin, allowing arbitrary form submissions.

🎯 **Affected: Online Graduation Announcement System 1.0**. Limited to this version, component: User Management Module (`tambahuser.php`).

💻 **Attackers can create admin accounts**. No original credentials required; directly inject admin users to gain backend control.

🔓 **Low exploitation barrier**. No authentication or special configuration needed. Attackers only need to trick users into clicking malicious links or visiting malicious pages.

🧨 **Exploit available**. ExploitDB-48571 provides PoC, enabling direct construction of malicious HTML forms to inject admin accounts.

🔍 **Self-check method**: Verify if `/tambahuser.php` lacks CSRF validation. Scan for form submission endpoints vulnerable to forgery.

🛠️ **No official patch available**. According to VulnCheck and ExploitDB, no official fix or update has been released.

🛡️ **Temporary mitigation**: Add CSRF Token; enable Referer check; restrict user addition permissions; use SameSite Cookie.

⚠️ **High priority!** CVSS 3.1 score (I:L), enabling direct privilege escalation. Immediate fix or temporary protection recommended.