CVE-2012-3362: CSRF
Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3362?
CVE-2012-3362 is considered a high severity vulnerability due to its potential for unauthorized administrative account creation.
How do I fix CVE-2012-3362?
To fix CVE-2012-3362, update eXtplorer to version 2.1 RC4 or later, which addresses the cross-site request forgery issue.
What type of vulnerability is CVE-2012-3362?
CVE-2012-3362 is a cross-site request forgery (CSRF) vulnerability that allows attackers to hijack administrator authentication.
Who is affected by CVE-2012-3362?
CVE-2012-3362 affects users of eXtplorer versions 2.1 RC3 and earlier, specifically those with administrative privileges.
Can CVE-2012-3362 lead to further exploitation?
Yes, CVE-2012-3362 can lead to further exploitation by allowing attackers to create unauthorized administrator accounts.