CVE-2012-5320

Cross-site request forgery CSRF vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-5320

CVE-2012-5320 : CSRF vulnerability in Sagem F@ST 2604 253180972B, in password.cgi, allows remote attackers to hijack administrator authentication and change the password via the sysPassword parameter. Affected component: password.cgi on Sagem F@ST 2604 series. Root cause: CSRF enabling password c...