CVE-2012-5891

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...

PT-2012-6172

Name of the Vulnerable Software and Affected Versions DAlbum versions 1.44 build 174 and earlier Description The issue affects the photo/pass.php file, allowing remote attackers to exploit multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities enable attackers to hijack t...

CVE-2012-5891: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...