Description
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action.
Unscored
CVE-2011-5306
EUVD-2011-5205GHSA-67h3-48c6-8fgj
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijac…
Published Jan 1, 2015 · Updated Sep 16, 2024 · Assigned by mitre