CVE-2012-5695

Bulb Security Smartphone Pentest Framework 0.1.2-0.1.4 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS message.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/87327
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80313
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51415

Scores

EPSS 0.0067
EPSS Percentile 47.6%

Details

CWE
CWE-352
Status published
Products (3)
bulbsecurity/smartphone_pentest_framework 0.1.2
bulbsecurity/smartphone_pentest_framework 0.1.3
bulbsecurity/smartphone_pentest_framework 0.1.4
Published Oct 20, 2014
Tracked Since Feb 18, 2026