Lucene search
HistoryNov 26, 2012 - 11:55 p.m.
CVE-2010-5285
cve-2010-5285
cross-site request forgery
csrf
collabtive 0.6.5
admin.php
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.2%
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| o-dyn:collabtive | o-dyn collabtive | eq | 0.6.5 |
Related
cvelist
cvelist
CVE-2010-5285
2012-11-26 23:00:00
prion
prion
Cross site request forgery (csrf)
2012-11-26 23:55:00
ubuntucve
ubuntucve
CVE-2010-5285
2012-11-26 00:00:00
openvas
openvas
Collabtive Cross Site Scripting and HTML Injection Vulnerabilities
2010-10-13 00:00:00
Collabtive Cross Site Scripting and HTML Injection Vulnerabilities
2010-10-13 00:00:00
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.2%
Related for CVE-2010-5285