Cross site request forgery (csrf)

2009-11-2913:07:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

CPENameOperatorVersion
simplogeq0.9.3.2

CPE	Name	Operator	Version
	simplog	eq	0.9.3.2

References

secunia.com/advisories/21390

www.securityfocus.com/bid/37063

exchange.xforce.ibmcloud.com/vulnerabilities/54354

www.exploit-db.com/exploits/10180