medium6.8Public exploit code
CVE-2012-0997
Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of adm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)2012-02-15 · webapps · php · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 11in1 | 11in1 | Version 1.2.1 |