Description
Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.
References
- bingocms-unspecified-csrf(52838) vdb-entry
- 57425 vdb-entry
- JVNDB-2009-000058 third-party-advisory
- http://www.bingo-cms.jp/security/jvn68640473.html
- JVN#68640473 third-party-advisory
- 36458 third-party-advisory