Description

Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1.

Remediation

References

CVE-2013-2778

Related Vulnerabilities

b2evolution Other Vulnerability (CVE-2007-2358)

WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)

Internet Information Services Other Vulnerability (CVE-2001-0902)

WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Cross-Site Scripting (5.1.2)

WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Privilege Escalation (1.6.0)

Severity

High

Classification

CVE-2013-2778 CWE-352

Tags

Missing Update Known Vulnerabilities