CVE-2012-5326

2012-10-0820:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

66.1%

JSON

Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action.

References

www.exploit-db.com/exploits/18404

exchange.xforce.ibmcloud.com/vulnerabilities/72611