CVE-2010-4750

2011-03-0121:00:00

mitre

www.cve.org

7.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.3%

JSON

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators.

References

blogcms.com/

packetstormsecurity.org/files/view/96731/blogcms-xsrfxss.txt

securityreason.com/securityalert/8112

www.exploit-db.com/exploits/15743

www.htbridge.ch/advisory/xsrf_csrf_in_blogcms.html