108397vdb entry
http://osvdb.org/show/osvdb/108397 CVE-2014-4716
Thomson TWG87OUIR - POST Password Cross-Site Request Forgery
Record summary
CVE-2014-4716 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBThomson TWG87OUIR - POST Password Cross-Site Request ForgeryExploitDB exploitby nopesledNot analyzed1 file
References
4packetstormsecurity.com
http://packetstormsecurity.com/files/127244/Thomson-TWG87OUIR-Cross-Site-Request-Forgery.html 33866exploit
http://www.exploit-db.com/exploits/33866 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-4716