CVE-2010-5285 Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via t...
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| o-dyn collabtive | = 0.6.5 | No fix listed |
References
- packetstormsecurity.org
- 41805 third-party-advisory vendor-advisory
- www.anatoliasecurity.com
- 15240 exploit
- 44050 exploit vdb-entry