NVD

Id
44091  
Name
CVE-2012-2275  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator"s email via an editUser action to lib/usermanagement/userInfo.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-15  
Modified Date
2012-09-17  
Seq
2012-2275  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221468 44091 CVE-2012-2275 20120905 Cross-Site Request Forgery (CSRF) in TestLink  View
221469 44091 CVE-2012-2275 http://gitorious.org/testlink-ga/testlink-code/commit/252788c2373e73173172ada9af661e0721599891  View
221470 44091 CVE-2012-2275 http://gitorious.org/testlink-ga/testlink-code/commit/2d4ac941314f8bda80e265c9de8bacf17d1cd3e6  View
221471 44091 CVE-2012-2275 http://gitorious.org/testlink-ga/testlink-code/commit/c8751a3c9ad8970b49d1bf882203efacd10af087  View
221472 44091 CVE-2012-2275 http://packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html  View
221473 44091 CVE-2012-2275 21135  View
221474 44091 CVE-2012-2275 testlink-userinfo-csrf(78306)  View
221475 44091 CVE-2012-2275 https://www.htbridge.com/advisory/HTB23088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28717 JVNDB-2012-004424 TestLink におけるクロスサイトリクエストフォージェリの脆弱性 TestLink には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2275 55513 CVE-2012-2275 44091 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004424.html 2012-09-15 2012-09-19 View