Security Advisory
CVE-2012-1203
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a save_user action.