CVE-2012-4280

2022-10-0316:15:32

mitre

www.cve.org

csrf

free realty

authentication hijacking

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that (1) add an agent via an addagent action or (2) modify an agent.