CVE

Id
59134  
CVE No.
CVE-2012-5891  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an add action, (2) change user passwords via a change action, or (3) delete a user via a delete action.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603719 59134 CVE-2012-5891 EXPLOIT-DB:18685  View
603720 59134 CVE-2012-5891 URL:http://www.exploit-db.com/exploits/18685  View
603721 59134 CVE-2012-5891 MISC:http://packetstormsecurity.org/files/111402/Dalbum-144-Build-174-Cross-Site-Request-Forgery.html  View
603722 59134 CVE-2012-5891 OSVDB:80745  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29684 JVNDB-2012-005391 Quest InTrust の AnnotateX.dll における任意のコードを実行される脆弱性 Quest InTrust の AnnotateX.dll 内の Annotation Objects Extension ActiveX コントロールは、適切に Add メソッドを実装していないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-5896 59134 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005391.html  View