Unscored CVE-2007-3331 EUVD-2007-3321GHSA-fpm8-7326-6p2g

Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a ce…

Published Jun 21, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a certain HTML form that is posted automatically by JavaScript or (2) a news post.

References

38617 vdb-entry
2829 third-party-advisory
20070617 H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF mailing-list
easynews-unspecified-csrf(34893) vdb-entry