CVE-2017-6086

Multiple cross-site request forgery CSRF vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to 1 add an administrator user via a crafted POST request to...

PT-2017-16885

Name of the Vulnerable Software and Affected Versions ViMbAdmin version 3.0.15 Description The issue allows remote attackers to hijack the authentication of logged administrators. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities in the addAction and purgeActio...

CVE-2017-6086: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to 1 add an administrator user via a crafted POST request to...