CVE-2010-3305: CSRF
Published Nov 12, 2019
·Updated
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
Affected Software
2 affected components
debian/pixelpost
Pixelpost=1.7.3
Event History
Nov 12, 2019
CVE Published
via MITRE·09:09 PM
Data Sourced
via MITRE·09:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2010-3305?
CVE-2010-3305 is considered a medium severity vulnerability due to its potential to allow unauthorized access to admin accounts.
2
How do I fix CVE-2010-3305?
To fix CVE-2010-3305, upgrade to a version of Pixelpost that is not vulnerable to CSRF attacks.
3
What type of vulnerability is CVE-2010-3305?
CVE-2010-3305 is a cross-site request forgery (CSRF) vulnerability.
4
Who is affected by CVE-2010-3305?
Users of Pixelpost version 1.7.3 are affected by CVE-2010-3305.
5
Can CVE-2010-3305 lead to unauthorized changes?
Yes, CVE-2010-3305 can allow remote attackers to change the admin password.