CVE-2010-2114 Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web...
LowCVSS 2.6
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brekeke pbx | = 2.4.4.8 | No fix listed |
References
- cross-site-scripting.blogspot.com exploit
- 64950 vdb-entry
- 39952 third-party-advisory vendor-advisory