CVE-2014-7190

Openfiler 2.99.1 is affected by multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions and trigger shutdown or reboot via a request to admin/system_shutdown.html. The underlying issue is CSRF in the admin interface that permits state-changing actions without pr...