CVE-2012-2999: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

PT-2012-4424

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server versions prior to 5.0.5.0 Description The issue affects the web interface of the software, where multiple cross-site request forgery CSRF vulnerabilities are present. These vulnerabilities allow remote attackers to hijack t...