NVD

Id
43223  
Name
CVE-2012-1220  
Description
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-02-21  
Modified Date
2012-02-24  
Seq
2012-1220  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217626 43223 CVE-2012-1220 18464  View
217627 43223 CVE-2012-1220 gazie-adminutente-csrf(72991)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25832 JVNDB-2012-001539 GAzie の modules/config/admin_utente.php におけるクロスサイトリクエストフォージェリの脆弱性 GAzie の modules/config/admin_utente.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-1220 54458 CVE-2012-1220 43223 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001539.html 2012-02-21 2012-02-22 View