Unscored CVE-2011-5316 EUVD-2011-5215GHSA-g4w5-383h-h2mx

Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authent…

Published Jan 1, 2015 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action.

References

https://www.htbridge.com/advisory/HTB22768