Unscored CVE-2013-7334 EUVD-2013-7108GHSA-4v57-p22c-8frv

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrato…

Published Mar 11, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related to CVE-2012-6290.

References

http://forum.imagecms.net/viewtopic.php?id=1436
89512 vdb-entry
https://www.htbridge.com/advisory/HTB23132
http://packetstormsecurity.com/files/119806/ImageCMS-4.0.0b-SQL-Injection.html
20130123 SQL Injection Vulnerability in ImageCMS mailing-list