CVEvulnerability
CVE-2012-1058
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-02-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.
Affected configurations
• flyspray flyspray 0.9.9.6
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/78923 osvdb.org
- http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html Exploit
- http://secunia.com/advisories/47881 Vendor Advisory
- http://www.exploit-db.com/exploits/18468 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73051 exchange.xforce.ibmcloud.com
- http://osvdb.org/78923 osvdb.org
- http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html Exploit
- http://secunia.com/advisories/47881 Vendor Advisory
- http://www.exploit-db.com/exploits/18468 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73051 exchange.xforce.ibmcloud.com