CVE-2012-1058

EUVD-2012-1095
Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
flysprayflyspray
0.9.9.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/78923
http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html
http://secunia.com/advisories/47881
http://www.exploit-db.com/exploits/18468
https://exchange.xforce.ibmcloud.com/vulnerabilities/73051
http://osvdb.org/78923
http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html
http://secunia.com/advisories/47881
http://www.exploit-db.com/exploits/18468
https://exchange.xforce.ibmcloud.com/vulnerabilities/73051