CVE-2010-3305

EUVD-2010-3303
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
pixelpostpixelpost
1.7.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pixelpost
hardy
dne
lucid
ignored
maverick
ignored
natty
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/cve-2010-3305
https://security-tracker.debian.org/tracker/CVE-2010-3305
https://www.exploit-db.com/exploits/15014
https://www.openwall.com/lists/oss-security/2010/09/17/7
https://access.redhat.com/security/cve/cve-2010-3305
https://security-tracker.debian.org/tracker/CVE-2010-3305
https://www.exploit-db.com/exploits/15014
https://www.openwall.com/lists/oss-security/2010/09/17/7