CVE-2012-2275

🗓️ 15 Sep 2012 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

CVE-2012-2275 Multiple CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack authenticatio

Reporter	Title	Published	Views	Family All 11
zdt	TestLink 1.9.3 Cross Site Request Forgery Vulnerability	6 Sep 201200:00	–	zdt
Cvelist	CVE-2012-2275	15 Sep 201217:00	–	cvelist
Exploit DB	TestLink 1.9.3 - Cross-Site Request Forgery	7 Sep 201200:00	–	exploitdb
EUVD	EUVD-2012-2268	7 Oct 202500:30	–	euvd
exploitpack	TestLink 1.9.3 - Cross-Site Request Forgery	7 Sep 201200:00	–	exploitpack
htbridge	Сross-Site Request Forgery (CSRF) in TestLink	18 Apr 201200:00	–	htbridge
NVD	CVE-2012-2275	15 Sep 201217:55	–	nvd
Packet Storm	TestLink 1.9.3 Cross Site Request Forgery	6 Sep 201200:00	–	packetstorm
Prion	Cross site request forgery (csrf)	15 Sep 201217:55	–	prion
securityvulns	Сross-Site Request Forgery (CSRF) in TestLink	7 Sep 201200:00	–	securityvulns

NVD

Node

Source	Link
htbridge	www.htbridge.com/advisory/HTB23088
packetstormsecurity	www.packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html
gitorious	www.gitorious.org/testlink-ga/testlink-code/commit/c8751a3c9ad8970b49d1bf882203efacd10af087
gitorious	www.gitorious.org/testlink-ga/testlink-code/commit/2d4ac941314f8bda80e265c9de8bacf17d1cd3e6
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/78306
gitorious	www.gitorious.org/testlink-ga/testlink-code/commit/252788c2373e73173172ada9af661e0721599891
exploit-db	www.exploit-db.com/exploits/21135
archives	www.archives.neohapsis.com/archives/bugtraq/2012-09/0023.html

Parameter	Position	Path	Description	CWE
doAction	request body	lib/usermanagement/userInfo.php	CSRF vulnerability enabling unauthorized modification of administrator email via crafted POST request to userInfo.php (doAction=editUser).	CWE-352
lastName	request body	lib/usermanagement/userInfo.php	CSRF vulnerability enabling unauthorized modification of administrator email via crafted POST request to userInfo.php (doAction=editUser).	CWE-352
firstName	request body	lib/usermanagement/userInfo.php	CSRF vulnerability enabling unauthorized modification of administrator email via crafted POST request to userInfo.php (doAction=editUser).	CWE-352
emailAddress	request body	lib/usermanagement/userInfo.php	CSRF vulnerability enabling unauthorized modification of administrator email via crafted POST request to userInfo.php (doAction=editUser).	CWE-352

16 Jun 2026 23:41Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

EPSS0.02729