Description

Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.

Remediation

References

CVE-2010-5285

Related Vulnerabilities

WordPress Plugin WP Unique Article Header Image Cross-Site Request Forgery (1.0)

WebLogic Improper Access Control Vulnerability (CVE-2016-5601)

WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP Multiple Vulnerabilities (4.27.4)

Oracle JRE CVE-2012-0497 Vulnerability (CVE-2012-0497)

WordPress Plugin Video Lead Form 'errMsg' Parameter Cross-Site Scripting (0.5)

Severity

Medium

Classification

CVE-2010-5285 CWE-352

Tags

Missing Update Known Vulnerabilities