PT-2017-12104

Name of the Vulnerable Software and Affected Versions Mongoose Web Server versions prior to 6.9 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify Mongoose.conf via a request to " mg admin?save". This can be leveraged...