CVE-2012-6631
Vessio NetBill 1.2 - Cross-Site Request Forgery via Admin Account Addition
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action.
References (5)
Core 5
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49109
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75539
Exploit x_refsource_misc
http://www.vulnerability-lab.com/get_content.php?id=560
Exploit x_refsource_misc
http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/81881
Scores
EPSS
0.0069
EPSS Percentile
48.6%
Details
CWE
CWE-352
Status
published
Products (1)
vessio/netbill
1.2
Published
Jan 16, 2014
Tracked Since
Feb 18, 2026