medium6.8Public exploit code
CVE-2010-3213
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authenticat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Outlook Web Access 2007 - Cross-Site Request Forgery2010-07-08 · webapps · windows · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Outlook Web Access | Version 2007 |
Weakness classification
References
- NVD record
- CVE.org record
- http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails
- http://www.exploit-db.com/exploits/14285
- http://www.securityfocus.com/bid/41462
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60164
- http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails
- http://www.exploit-db.com/exploits/14285
- http://www.securityfocus.com/bid/41462
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60164