CVE-2013-7209 Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the....
MediumCVSS 6.8
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jforum | All versions | No fix listed |
References
- 101438 vdb-entry
- packetstormsecurity.com exploit
- 20131226 [CVE-2013-7209]JForum CSRF(Cross-site request forgery) Vulnerability exploit mailing-list