CVE-2010-0707

CVE-2010-0707: CSRF in Employee Timeclock Software 0.99 (add_user.php) allows remote attackers to hijack an administrator’s session and create new administrative users. Root cause is CSRF vulnerability on admin-account creation requests; impact is unauthorized admin account creation as described....

CVE-2010-0707

creationtimestamp| type| source ---|---|--- 2010-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11516...