CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

CVE-2012-6508

CVE-2012-6508 affects NetArt Media Car Portal 3.0 with multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions and perform admin-level actions such as changing user passwords, creating new users or sub-users, and editing profile data via specific actions in the secur...