CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002

CVE-2012-4002 affects GLPI-PROJECT GLPI before 0.83.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The issue is documented across multiple sources, with NVD assigning a CVSS v2 base s...

[ MDVSA-2012:132 ] glpi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:132 http://www.mandriva.com/security/ Package : glpi Date : August 15, 2012 Affected: Enterprise Server 5.0 Problem Description: Multiple cross-site request forgery CSRF and cross-site scripting XSS flaws ha...