CVE-2010-2039

Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php.  NOTE: some of these details are obtained from third party information.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
gpeasygpeasy_cms
𝑥
≤ 1.6.2
gpeasygpeasy_cms
1.5
gpeasygpeasy_cms
1.5:rc2
gpeasygpeasy_cms
1.5:rc3
gpeasygpeasy_cms
1.5:rc4
gpeasygpeasy_cms
1.6
gpeasygpeasy_cms
1.6:rc1
gpeasygpeasy_cms
1.6:rc2
gpeasygpeasy_cms
1.6:rc3
gpeasygpeasy_cms
1.6:rc4
gpeasygpeasy_cms
1.6:rc5
gpeasygpeasy_cms
1.6.1
gpeasygpeasy_cms
1.6.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/1004-exploits/gpeasy-xsrf.txt
http://secunia.com/advisories/39643
http://www.exploit-db.com/exploits/12441
http://www.osvdb.org/64130
http://www.vupen.com/english/advisories/2010/1030
https://exchange.xforce.ibmcloud.com/vulnerabilities/58214
http://packetstormsecurity.org/1004-exploits/gpeasy-xsrf.txt
http://secunia.com/advisories/39643
http://www.exploit-db.com/exploits/12441
http://www.osvdb.org/64130
http://www.vupen.com/english/advisories/2010/1030
https://exchange.xforce.ibmcloud.com/vulnerabilities/58214