Beveiligingsadvies

CVE-2012-1416

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-10-08 18:00:00
Laatst bijgewerkt 2024-08-06 18:53:37
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts via a member_new action to my_admin/admin1_members.php or (2) modify the default site title via a save action to my_admin/admin1_configuration.php.