CVEvulnerability

CVE-2012-6508

6.8 MEDIUM Published 2013-01-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; (2) create a user or (3) create a sub user via a sub_accounts action in the home module to USERS/index.php; or (4) change profile information via an edit action in the profile module to USERS/index.php.

Affected configurations

• netartmedia car portal 3.0

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References