Lucene search
MitreCVE-2010-2039HistoryMay 25, 2010 - 2:30 p.m.
CVE-2010-2039
2010-05-2514:30:01
CWE-352
mitre
web.nvd.nist.gov
24
cve-2010-2039
cross-site request forgery
csrf vulnerability
gpeasy cms
authentication hijacking
admin_users action
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.014
Percentile
86.9%
Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
gpeasygpeasy_cmsRange≤1.6.2
ORgpeasygpeasy_cmsMatch1.5
ORgpeasygpeasy_cmsMatch1.5rc2
ORgpeasygpeasy_cmsMatch1.5rc3
ORgpeasygpeasy_cmsMatch1.5rc4
ORgpeasygpeasy_cmsMatch1.6
ORgpeasygpeasy_cmsMatch1.6rc1
ORgpeasygpeasy_cmsMatch1.6rc2
ORgpeasygpeasy_cmsMatch1.6rc3
ORgpeasygpeasy_cmsMatch1.6rc4
ORgpeasygpeasy_cmsMatch1.6rc5
ORgpeasygpeasy_cmsMatch1.6.1
ORgpeasygpeasy_cmsMatch1.6.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gpeasy | gpeasy_cms | * | cpe:2.3:a:gpeasy:gpeasy_cms:*:*:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.5 | cpe:2.3:a:gpeasy:gpeasy_cms:1.5:*:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.5 | cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc2:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.5 | cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc3:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.5 | cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc4:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.6 | cpe:2.3:a:gpeasy:gpeasy_cms:1.6:*:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.6 | cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc1:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.6 | cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc2:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.6 | cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc3:*:*:*:*:*:* |
| gpeasy | gpeasy_cms | 1.6 | cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc4:*:*:*:*:*:* |
Related
exploitdb
exploitdb
gpEasy 1.6.1 - Cross-Site Request Forgery (Add Admin)
2010-04-28 00:00:00
cvelist
cvelist
CVE-2010-2039
2010-05-25 14:00:00
nvd
nvd
CVE-2010-2039
2010-05-25 14:30:01
prion
prion
Cross site request forgery (csrf)
2010-05-25 14:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.014
Percentile
86.9%
Related for CVE-2010-2039