CVEvulnerability
CVE-2010-2113
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-05-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.
Affected configurations
• uniformserver uniformserver 5.6.5
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html Exploit
- http://osvdb.org/64858 osvdb.org
- http://secunia.com/advisories/39913 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58844 exchange.xforce.ibmcloud.com
- http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html Exploit
- http://osvdb.org/64858 osvdb.org
- http://secunia.com/advisories/39913 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58844 exchange.xforce.ibmcloud.com