CVEvulnerability
CVE-2010-5285
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
Affected configurations
• o-dyn collabtive 0.6.5
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt packetstormsecurity.org
- http://secunia.com/advisories/41805 Vendor Advisory
- http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt www.anatoliasecurity.com
- http://www.exploit-db.com/exploits/15240 Exploit
- http://www.securityfocus.com/bid/44050 Exploit
- http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt packetstormsecurity.org
- http://secunia.com/advisories/41805 Vendor Advisory
- http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt www.anatoliasecurity.com
- http://www.exploit-db.com/exploits/15240 Exploit
- http://www.securityfocus.com/bid/44050 Exploit