CVE-2012-4325: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...

PT-2012-5327

Name of the Vulnerable Software and Affected Versions Utopia News Pro UNP versions 1.4.0 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add administrator accounts. This is related t...