CVE-2012-3231 in Webatall web@all
요약 (영어)
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary code via a do_addfile action to inc/browser/action.php.
예약하다
2012. 06. 06.
공개
2012. 06. 27.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 61140 | Webatall web@all 교차 사이트 요청 위조 | 352 | 정의되지 않음 | 공식 수정 | CVE-2012-3231 |