CVE-2012-3231: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary...

PT-2012-4586

Name of the Vulnerable Software and Affected Versions web@all versions prior to the version downloaded on May 30, 2012 Description The issue allows remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information. This can be...