CVE-2012-5695 Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators...
MediumCVSS 6.8
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bulbsecurity smartphone pentest framework | = 0.1.2 | No fix listed |
| bulbsecurity smartphone pentest framework | = 0.1.3 | No fix listed |
| bulbsecurity smartphone pentest framework | = 0.1.4 | No fix listed |
References
- 87327 vdb-entry
- 51415 third-party-advisory
- spf-guesspassword-csrf(80313) vdb-entry
- twitter.com vendor-advisory
- www.htbridge.com exploit
- www.htbridge.com exploit