CVE-2012-1416 Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts via...
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts via a member_new action to my_admin/admin1_members.php or (2) modify the default site title via a save action to my_admin/admin1_configuration.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| socialcms | = 1.0.2 | No fix listed |
References
- 44313 third-party-advisory vendor-advisory
- 17193 exploit
- 18487 exploit
- 71930 vdb-entry
- socialcms-multiple-csrf(66985) vdb-entry