CVEvulnerability
CVE-2010-2294
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.
Affected configurations
• pxsystem plume-cms (<= 1.2.4)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/40133 Vendor Advisory
- http://www.securityfocus.com/archive/1/511761/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1430 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59308 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/40133 Vendor Advisory
- http://www.securityfocus.com/archive/1/511761/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1430 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59308 exchange.xforce.ibmcloud.com