Cross site request forgery (csrf)

2012-10-0818:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

JSON

Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

CPENameOperatorVersion
f\\@st_2604_firmwareeq253180972.0.98

CPE	Name	Operator	Version
	f\\@st_2604_firmware	eq	253180972.0.98

References

secunia.com/advisories/48088

www.osvdb.org/79649

exchange.xforce.ibmcloud.com/vulnerabilities/73380

www.exploit-db.com/exploits/18504