Security Advisory

CVE-2012-6047

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-11-27 02:00:00
Last updated 2024-09-16 18:12:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php.