Description

Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.

Remediation

References

CVE-2010-5285

Related Vulnerabilities

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29523)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.51)

Zope Web Application Server Other Vulnerability (CVE-2006-4684)

WordPress Plugin Spryng Payments for WooCommerce Cross-Site Scripting (1.6.7)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2851)

Severity

Medium

Classification

CVE-2010-5285 CWE-352

Tags

Missing Update Known Vulnerabilities