CVE-2012-5891

DAlbum 1.44 build 174 and earlier is affected by multiple CSRF vulnerabilities in photo/pass.php that allow remote attackers to hijack administrator authentication for actions (1) add a user, (2) change user passwords, or (3) delete a user. The vulnerability is in CSRF protection for these admin ...

CVE-2012-5891

creationtimestamp| type| source ---|---|--- 2012-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18685...