Description

Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1.

Remediation

References

CVE-2013-2778

Related Vulnerabilities

MySQL CVE-2020-2892 Vulnerability (CVE-2020-2892)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6296)

WordPress Plugin Slideshow Gallery LITE Unspecified Vulnerability (1.7.4.2)

CubeCart Improper Input Validation Vulnerability (CVE-2013-1465)

Oracle Application Server Other Vulnerability (CVE-2007-0289)

Severity

High

Classification

CVE-2013-2778 CWE-352

Tags

Missing Update Known Vulnerabilities