PT-2014-8756

Name of the Vulnerable Software and Affected Versions Php Scriptlerim Who's Who script affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-8953: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers to hijack the authentication of administrators or requests that 1 add an admin account via a request to filepath/yonetim/plugin/adminsave.php or have unspecified impact via a reques...