CVE-2013-7334 Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q....
MediumCVSS 6.8
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related to CVE-2012-6290.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imagecms | <= 4.0.0 | No fix listed |
References
- 20130123 SQL Injection Vulnerability in ImageCMS exploit mailing-list
- forum.imagecms.net
- 89512 vdb-entry
- packetstormsecurity.com exploit
- www.htbridge.com exploit