CVE-2012-3362 Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account v...
MediumCVSS 6.8
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extplorer | <= 2.1.0 | No fix listed |
References
- www.autosectools.com exploit
- DSA-2510 vendor-advisory
- [oss-security] 20120624 CVE request: CSRF in eXtplorer mailing-list
- [oss-security] 20120624 Re: CVE request: CSRF in eXtplorer mailing-list
- [oss-security] 20120626 Re: CVE request: CSRF in eXtplorer mailing-list
- [oss-security] 20120627 Re: CVE request: CSRF in eXtplorer mailing-list