Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285)

Description

Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.

Remediation

References

CVE-2010-5285

Related Vulnerabilities

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.15)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2153)

Lighttpd Other Vulnerability (CVE-2007-3947)

Apache 2.x version older than 2.0.43

MySQL CVE-2016-0666 Vulnerability (CVE-2016-0666)

Severity

Medium

Classification

CVE-2010-5285 CWE-352