CVE-2010-4750

Cross-site request forgery CSRF vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators...

CVE-2010-4750

CVE-2010-4750 describes a CSRF vulnerability in BLOG:CMS (admin/libs/ADMIN.php) that allows a logged-in administrator’s credentials to be hijacked via forged requests, potentially enabling credential changes. The related HTB advisory expands this to CSRF alongside XSS/Script-insertion issues in B...