Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in modules/config/adminutente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password...

CVE-2012-1220

CVE-2012-1220 describes a CSRF vulnerability in GAzie 5.20 and earlier, affecting the modules/config/admin_utente.php component. The flaw allows an attacker to hijack the administrator’s authenticated session by issuing requests that change account information via an update action, demonstrated b...