Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings parameters...

CVE-2012-0990

The CVE-2012-0990 issue affects DClassifieds 0.1 final and is a Cross-site Request Forgery (CSRF) in admin/settings/update. The underlying flaw allows an attacker to hijack an administrator’s session to modify settings (e.g., administrator password or email) via crafted Settings[] parameters. Exp...