CVE-2010-2282

2010-06-1419:00:00

mitre

www.cve.org

cross-site request forgery

tomatocms

administrative password

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

50.9%

JSON

Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password.

References

holisticinfosec.org/content/view/148/45/

secunia.com/advisories/39680