EUVD-2012-3997

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4053

The CVE-2012-4053 issue affects eZ Publish 4.1–4.6 via the eZOE Flash Player component, described as a Cross-site Request Forgery (CSRF) allowing remote attackers to hijack user authentication via unknown vectors. The provided documents do not specify exact exploitation vectors, affected products...

CVE-2012-4053

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...