Security Advisory

CVE-2015-2680

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-03-23 16:00:00
Last updated 2024-08-06 05:24:37
Assigner mitre
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php.