CVE-2012-1415
DFLabs PTK < 1.0.5 - Cross-Site Request Forgery in Logout Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-1415. PoCs published by Ivano Binetti.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in DFLabs PTK <= 1.0.5, allowing an attacker to force administrator/investigator logout by tricking them into visiting a malicious webpage. The lack of session validation in the logout.php script enables this attack.
Description
Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout.
Exploits (1)
This exploit demonstrates a CSRF vulnerability in DFLabs PTK <= 1.0.5, allowing an attacker to force administrator/investigator logout by tricking them into visiting a malicious webpage. The lack of session validation in the logout.php script enables this attack.