PT-2011-2429

Name of the Vulnerable Software and Affected Versions Zikula versions prior to 1.2.5 Description A cross-site request forgery CSRF issue exists in the Users module, allowing remote attackers to hijack administrator authentication for requests that modify account privileges. This is achieved by...