medium6.8Public exploit code
CVE-2012-0286
Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified vict…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- stoneware webnetwork6 - Multiple Vulnerabilities2012-01-24 · webapps · jsp · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stone-Ware | Webnetwork | through 6.0.7.0 Version 6.0.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html
- http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf
- http://www.stone-ware.com/swql.jsp?kb=d1960
- http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html
- http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf
- http://www.stone-ware.com/swql.jsp?kb=d1960