CVE-2012-1058

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.
CSRF
Severity
UNKNOWN
AV:N/AC:M/Au:S/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
flysprayflyspray
0.9.9.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/78923
http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html
http://secunia.com/advisories/47881
http://www.exploit-db.com/exploits/18468
https://exchange.xforce.ibmcloud.com/vulnerabilities/73051
http://osvdb.org/78923
http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html
http://secunia.com/advisories/47881
http://www.exploit-db.com/exploits/18468
https://exchange.xforce.ibmcloud.com/vulnerabilities/73051