Skip to content

CVE-2012-1978 Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an adm...

MediumCVSS 6.8 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via a request to auth/process.php, (2) delete an administrator via a request to auth/admin/adminprocess.php, (3) add an event via a request to engine/new_event.php, or (4) delete an event via a request to phpagenda/.

Affected products

ProductAffected versionsFixed in
simple php agenda project simple php agenda <= 2.2.8 No fix listed

References