Lucene search
MitreCVELIST:CVE-2014-10001HistoryJan 13, 2015 - 11:00 a.m.
CVE-2014-10001
2015-01-1311:00:00
mitre
www.cve.org
7
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the i18n[1][name] parameter in a pjActionCreate action to the pjAdminServices controller or (2) add an administrator via a pjActionCreate action to the pjAdminUsers controller.
Related
prion
prion
Cross site request forgery (csrf)
2015-01-13 11:59:00
cve
cve
CVE-2014-10001
2015-01-13 11:59:09
nvd
nvd
CVE-2014-10001
2015-01-13 11:59:09
exploitdb
exploitdb
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
2014-01-14 00:00:00