78923vdb entry
http://osvdb.org/78923 CVE-2012-1058
Flyspray 0.9.9.6 - Cross-Site Request Forgery
Record summary
CVE-2012-1058 has a selected CVSS score of 6.0; EIP currently links 1 catalogued exploit.
Description
Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFlyspray 0.9.9.6 - Cross-Site Request ForgeryExploitDB exploitby Vaibhav GuptaNot analyzed1 file
References
6packetstormsecurity.org
http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html 47881Third-party advisory
http://secunia.com/advisories/47881 18468exploit
http://www.exploit-db.com/exploits/18468 flyspray-index-csrf(73051)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/73051 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-1058