CVE-2010-3024

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
hulihanapplicationsdiamondlist
0.1.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dev.hulihanapplications.com/issues/show/212
http://marc.info/?l=bugtraq&m=128104130309426&w=2
http://osvdb.org/66918
http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt
http://secunia.com/advisories/40873
http://www.exploit-db.com/exploits/14565
http://www.htbridge.ch/advisory/xsrf_csrf_in_diamondlist.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/60937
http://dev.hulihanapplications.com/issues/show/212
http://marc.info/?l=bugtraq&m=128104130309426&w=2
http://osvdb.org/66918
http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt
http://secunia.com/advisories/40873
http://www.exploit-db.com/exploits/14565
http://www.htbridge.ch/advisory/xsrf_csrf_in_diamondlist.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/60937