CVE-2012-2999

Cerberus FTP Server is vulnerable to cross-site request forgery (CSRF) in the web interface on versions prior to 5.0.5.0. The flaw allows an authenticated administrator’s session to be hijacked to perform actions such as adding a user or changing FTP service state via requests like /usermanager/u...

KLA10101 SB vulnerabilities in Cerberus FTP Server

A CSRF vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can hijack the administrators’ auth. This vulnerability can be exploited from the network at a point related to the web interface. Original advisories - Related products Cerberus-FTP-Server...