Description (CNA)
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/44050
- http://www.exploit-db.com/exploits/15240
- http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt
- http://secunia.com/advisories/41805
- http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt
ADP enrichment
No English description supplied.