2 matches found
Cross site request forgery (csrf)
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...
7.5CVSS6.9AI score0.02602EPSS
SaveExploits0References7Affected Software2
CVE-2008-0673
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...
6.5AI score
SaveExploits0References7
20