medium6.8
CVE-2011-5300
Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication o…
Impact
Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via certain admin_ parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pommo | Pommo-Ardvark | Version pr16.1 |