Lucene search
+L

5 matches found

NVD
NVD
•added 2012/02/14 8:55 p.m.•24 views

CVE-2010-5085

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

6.8CVSS7.5AI score0.00761EPSS
SaveExploits1References7
CVE
CVE
•added 2012/02/14 8:00 p.m.•63 views

CVE-2010-5085

CVE-2010-5085 concerns multiple CSRF vulnerabilities in Hulihan Amethyst 0.1.5 (admin/update_user and related endpoints) that allow remote attackers to hijack administrator authentication to change credentials or site configuration. The NVD description confirms cross-site request forgery risks en...

6.8CVSS5.9AI score0.00761EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2012/02/14 8:00 p.m.•34 views

CVE-2010-5085

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

7.5AI score0.00761EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2012/02/14 12:00 a.m.•7 views

PT-2012-1328

Name of the Vulnerable Software and Affected Versions Hulihan Amethyst versions 0.1.5 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the administrative password or the site's configuration due to multiple cross-sit...

6.8CVSS0.00761EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/14 12:00 a.m.•8 views

CVE-2010-5085: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

6.8CVSS5.9AI score0.00761EPSS
SaveExploits1References2
Rows per page
Query Builder