Description
Cross-site request forgery (CSRF) vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators.
References
- alstrasoftsiteuptime-commonsettings-csrf(74682) vdb-entry
- 48707 third-party-advisory
- 80947 vdb-entry
- http://packetstormsecurity.org/files/111563/AlstraSoft-Site-Uptime-Cross-Site-Request-Forgery.html