Description

Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.

Remediation

References

CVE-2014-4333

Related Vulnerabilities

Oracle Database Server CVE-2006-1866 Vulnerability (CVE-2006-1866)

Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29159)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.3)

Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8105)

Nginx CVE-2010-4180 Vulnerability (CVE-2010-4180)

Severity

Medium

Classification

CVE-2014-4333 CWE-352

Tags

Missing Update Known Vulnerabilities