CVE-2014-9459

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

CVE-2014-9459

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

CVE-2014-9459

Summary of CVE-2014-9459 (e107 CMS) : A CSRF vulnerability in the AdminObserver function of e107(2.0 alpha2) affects e107_admin/users.php, allowing a remote attacker to hijack administrator authentication by tricking a logged-in admin into performing an action that adds a user to the administrato...

CVE-2014-9459

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

CVE-2014-9459: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

PT-2015-4222

Name of the Vulnerable Software and Affected Versions e107 version 2.0 alpha2 Description A cross-site request forgery issue exists in the AdminObserver function, allowing remote attackers to hijack administrator authentication for requests that add users to the administrator group. This is...