E-Zone Media FuzeTalk 2.0 AddUser.CFM Administrator Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10276/info It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the application to properly validate the origin of...

CVE-2004-1995

Cross-Site Request Forgery CSRF vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm...

CVE-2004-1995

Cross-Site Request Forgery CSRF vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm...

PT-2004-2891 · Fusetalk · Fusetalk

Name of the Vulnerable Software and Affected Versions: FuseTalk version 2.0 Description: A Cross-Site Request Forgery CSRF issue allows remote attackers to create arbitrary accounts via a link to "adduser.cfm". Recommendations: For FuseTalk version 2.0, consider disabling the account creation...