CVE-2014-9459: CSRF
First published: Fri Jan 02 2015(Updated: )
Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| E107 E107 | =2.0-alpha2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/weakness
- collector/nvd-index
- vendor/e107
- canonical/e107 e107
- version/e107 e107/2.0-alpha2