CVE-2012-1220 Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that ch...
MediumCVSS 6.8
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| devincentiis gazie | <= 5.20 | No fix listed |
| devincentiis gazie | = 2.0.7 | No fix listed |
| devincentiis gazie | = 2.0.8 | No fix listed |
| devincentiis gazie | = 2.0.9 | No fix listed |
| devincentiis gazie | = 2.0.10 | No fix listed |
| devincentiis gazie | = 2.0.11 | No fix listed |
| devincentiis gazie | = 2.0.12 | No fix listed |
| devincentiis gazie | = 2.0.13 | No fix listed |
| devincentiis gazie | = 2.0.14 | No fix listed |
| devincentiis gazie | = 2.0.15 | No fix listed |
| devincentiis gazie | = 3.0.0 | No fix listed |
| devincentiis gazie | = 3.0.1 | No fix listed |
| devincentiis gazie | = 3.0.2 | No fix listed |
| devincentiis gazie | = 3.0.3 | No fix listed |
| devincentiis gazie | = 3.0.4 | No fix listed |
| devincentiis gazie | = 3.0.5 | No fix listed |
| devincentiis gazie | = 3.0.6 | No fix listed |
| devincentiis gazie | = 3.0.7 | No fix listed |
| devincentiis gazie | = 3.0.8 | No fix listed |
| devincentiis gazie | = 3.0.9 | No fix listed |
| devincentiis gazie | = 3.0.10 | No fix listed |
| devincentiis gazie | = 3.0.11 | No fix listed |
| devincentiis gazie | = 3.0.12 | No fix listed |
| devincentiis gazie | = 4.0.1 | No fix listed |
| devincentiis gazie | = 4.0.2 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| devincentiis gazie | = 4.0.3 | No fix listed |
| devincentiis gazie | = 4.0.4 | No fix listed |
| devincentiis gazie | = 4.0.5 | No fix listed |
| devincentiis gazie | = 4.0.6 | No fix listed |
| devincentiis gazie | = 4.0.7 | No fix listed |
| devincentiis gazie | = 4.0.8 | No fix listed |
| devincentiis gazie | = 4.0.9 | No fix listed |
| devincentiis gazie | = 4.0.10 | No fix listed |
| devincentiis gazie | = 4.0.11 | No fix listed |
| devincentiis gazie | = 4.0.12 | No fix listed |
| devincentiis gazie | = 4.0.13 | No fix listed |
| devincentiis gazie | = 5.0 | No fix listed |
| devincentiis gazie | = 5.1 | No fix listed |
| devincentiis gazie | = 5.2 | No fix listed |
| devincentiis gazie | = 5.3 | No fix listed |
| devincentiis gazie | = 5.4 | No fix listed |
| devincentiis gazie | = 5.5 | No fix listed |
| devincentiis gazie | = 5.6 | No fix listed |
| devincentiis gazie | = 5.7 | No fix listed |
| devincentiis gazie | = 5.8 | No fix listed |
| devincentiis gazie | = 5.9 | No fix listed |
| devincentiis gazie | = 5.10 | No fix listed |
| devincentiis gazie | = 5.11 | No fix listed |
| devincentiis gazie | = 5.12 | No fix listed |
| devincentiis gazie | = 5.13 | No fix listed |
| devincentiis gazie | = 5.14 | No fix listed |
| devincentiis gazie | = 5.15 | No fix listed |
| devincentiis gazie | = 5.16 | No fix listed |
| devincentiis gazie | = 5.17 | No fix listed |
| devincentiis gazie | = 5.18 | No fix listed |
| devincentiis gazie | = 5.19 | No fix listed |
References
- 47947 third-party-advisory vendor-advisory
- 18464 exploit
- gazie-adminutente-csrf(72991) vdb-entry