CVE-2012-5891

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...

CVE-2012-5891

DAlbum 1.44 build 174 and earlier is affected by multiple CSRF vulnerabilities in photo/pass.php that allow remote attackers to hijack administrator authentication for actions (1) add a user, (2) change user passwords, or (3) delete a user. The vulnerability is in CSRF protection for these admin ...