CVE-2012-1058: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

PT-2012-3047

Name of the Vulnerable Software and Affected Versions Flyspray version 0.9.9.6 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an "admin.newuser" action to "index.php". Recommendations For...

CVE-2012-1058

Summary: CVE-2012-1058 is a CSRF vulnerability in Flyspray 0.9.9.6 that allows remote attackers to hijack admin authentication by triggering admin.newuser actions on index.php to add new admin accounts. What is affected: Flyspray 0.9.9.6. The connected documents describe the vulnerability as CSRF...