CVE-2010-3464

Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...

CVE-2010-3464

SantaFox CSRF in admin/manager_users.class.php (v2.02, possibly earlier) allows an attacker to hijack admin sessions by performing actions via admin/index.php, e.g., adding administrative users through the save_admin path. Connected OpenVAS entry also notes XSS/CSRF vectors for SantaFox. Impact i...