CVE-2016-20051

CVE-2016-20051 identifies a Cross-Site Request Forgery (CSRF) vulnerability in Snews CMS version 1.7, enabling attackers to change administrator credentials. This is achieved by tricking an authenticated administrator into visiting a specially crafted web page containing a hidden form. Rated as Medium severity (CVSS 5.3), this vulnerability has a network attack vector and low complexity, but requires an authenticated administrator to be tricked into visiting a malicious page. Its primary impact is the unauthorized modification of administrator credentials, potentially leading to account compromise. There is no evidence of active exploitation, nor are public exploit codes available in common repositories like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are currently non-existent.