CVE-2012-1498

CVE-2012-1498 affects Webfolio CMS 1.1.4 and earlier. The issue is multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication through (1) adding an administrator via admin/users/add and (2) modifying a web page via admin/pages/edit/web_page_name. Details spec...