CVE-2014-100025
Savsoft Quiz - Cross-Site Request Forgery in User Data Insertion
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66287
Exploit x_refsource_misc
http://packetstormsecurity.com/files/125379
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/57102
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91548
Scores
EPSS
0.0126
EPSS Percentile
66.0%
Details
CWE
CWE-352
Status
published
Products (1)
savsoft_technologies/savsoft_quiz
Published
Jan 13, 2015
Tracked Since
Feb 18, 2026