Description
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
References
- 2258 third-party-advisory
- 23998 third-party-advisory
- 20070214 Secunia Research: MailEnable Web Mail Client MultipleVulnerabilities mailing-list
- 33191 vdb-entry
- ADV-2007-0595 vdb-entry
- http://secunia.com/secunia_research/2007-38/advisory/
- 22554 vdb-entry