CVE-2015-5075: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to index.php/users/create...

PT-2015-6768

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to...