6 matches found
CVE-2013-2700
Cross-site request forgery CSRF vulnerability in the Add/Edit page adminmenus.php in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors...
CVE-2013-2700
Vulnerability: CSRF in WP125 WordPress plugin (Add/Edit page adminmenus.php) affecting versions before 1.5.0. Attackers could hijack admin sessions to add/edit ads via unspecified vectors. Impact: unauthorized actions on admin-privileged functionality. Remediation: upgrade the WP125 plugin to ver...
CVE-2013-2700
Cross-site request forgery CSRF vulnerability in the Add/Edit page adminmenus.php in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors...
PT-2014-2619
Name of the Vulnerable Software and Affected Versions WP125 plugin versions prior to 1.5.0 Description A cross-site request forgery CSRF issue exists in the Add/Edit page, specifically in the adminmenus.php file. This allows remote attackers to hijack the authentication of administrators for...
CVE-2013-2700: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Add/Edit page adminmenus.php in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors...
WordPress WP125 Plugin <= 1.4.9 - CSRF
Because of this vulnerability in the adminmenus.php, the attackers can hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors. Solution Update the plugin...