CVE-2011-5306
01.01.2015, 11:59
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action.
| Vendor | Product | Version |
|---|---|---|
| zaunz_gmbh | cosmoshop | 10.05.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration