EUVD-2008-3702

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a 1 save or 2 delete action to an unspecified component...

CVE-2008-3716

CVE-2008-3716 is a CSRF vulnerability in Harmoni prior to 1.6.0 that allows remote attackers to perform administrative modifications via a (1) save or (2) delete action to an unspecified component. The NVD entry lists a base score of 6.0 (Medium) with network attack vector, requiring user interac...