Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.
References
- VU#576355 third-party-advisory
- 45437 third-party-advisory
- 50896 vdb-entry
- 77657 vdb-entry
- sit-multiple-csrf(71653) vdb-entry