Flyspray 0.9.9.6 CSRF Vulnerability

No description provided by source. Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability Date: 06 Feb 2012 Author: Vaibhav Gupta Software Link: http://flyspray.org/flyspray-0.9.9.6.zip Version: 0.9.9.6 +---+CSRF Add Admin Account after authentication+---+ html body...

CVE-2012-1058

Summary: CVE-2012-1058 is a CSRF vulnerability in Flyspray 0.9.9.6 that allows remote attackers to hijack admin authentication by triggering admin.newuser actions on index.php to add new admin accounts. What is affected: Flyspray 0.9.9.6. The connected documents describe the vulnerability as CSRF...

Flyspray 0.9.9.6 Cross Site Request Forgery

Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability Date: 06 Feb 2012 Author: Vaibhav Gupta Software Link: http://flyspray.org/flyspray-0.9.9.6.zip Version: 0.9.9.6 +---+CSRF Add Admin Account after authentication+---+ CSRF Exploit to add ADMIN account...

Flyspray 0.9.9.6 - Cross-Site Request Forgery

Flyspray 0.9.9.6 - Cross-Site Request Forgery Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability Date: 06 Feb 2012 Author: Vaibhav Gupta Software Link: http://flyspray.org/flyspray-0.9.9.6.zip Version: 0.9.9.6 +---+CSRF Add Admin Account after authentication+---+ CSRF Exploit to add ADMIN account...