CVE-2025-57310

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to…

High · published November 12, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

⚡ A sneaky CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 could let attackers execute arbitrary code with just a crafted POST request! 🔥 Think of it like a restaurant where the waiter serves food based on someone else's order — if the server doesn't check who ordered what, the wrong dish could land on your plate, causing chaos! If exploited, this vulnerability could allow an attacker to execute any code they wish on the server, potentially compromising sensitive data and system integrity. Imagine an intruder gaining full control and wreaking havoc with your admin settings — that's the kind of damage we're talking about!

Put simply

Think of it like a restaurant where the waiter serves food based on someone else's order — if the server doesn't check who ordered what, the wrong dish could land on your plate, causing chaos! This Cross-Site Request Forgery (CSRF) flaw allows attackers to send unauthorized commands to the server via a specifically crafted POST request directed at admin.php?p=ads&c=1, bypassing normal authentication checks.

What to do

If exploited, this vulnerability could allow an attacker to execute any code they wish on the server, potentially compromising sensitive data and system integrity. Imagine an intruder gaining full control and wreaking havoc with your admin settings — that's the kind of damage we're talking about! Immediately update your Simple-Faucet-Script to version 1.08 or later where this vulnerability is patched. Additionally, implement CSRF tokens in your forms to protect against unauthorized requests in the future. You've got this! Follow these steps and secure your system like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Published
2025-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to…
    cvelistv5