Description
Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts.
References
- 4537 third-party-advisory
- interact-unspecified-csrf(46269) vdb-entry
- 32434 third-party-advisory
- 20081031 Secunia Research: Interact SQL Injection and Cross-Site Request Forgery mailing-list
- http://secunia.com/secunia_research/2008-44/