CVE-2011-5300

pommo-ardvark PR16.1 - Cross-Site Request Forgery in User Configuration

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via certain admin_ parameters.

References (1)

Core 1
Core References

Scores

EPSS 0.0061
EPSS Percentile 44.9%

Details

CWE
CWE-352
Status published
Products (1)
pommo/pommo-ardvark pr16.1
Published Jan 01, 2015
Tracked Since Feb 18, 2026