Security Advisory

CVE-2012-1216

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-02-20 20:00:00
Last updated 2024-09-16 20:02:51
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action.