CVE-2015-4677

Cross-site request forgery CSRF vulnerability in FiverrScript aka Fiverr Script 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/adminscreate.php...

CVE-2015-4677

Cross-site request forgery CSRF vulnerability in FiverrScript aka Fiverr Script 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/adminscreate.php...

CVE-2015-4677

FiverrScript 7.2 is affected by a cross-site request forgery (CSRF) vulnerability that lets an attacker hijack an administrator’s session to create a new admin via the administrator/admins_create.php endpoint. The root cause is CSRF in the admin-creation flow, enabling unauthorized actions in the...