medium6.8
CVE-2012-2999
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the auth…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerberusftp | Ftp Server | through 5.0.4.3 Versions 1.0, 1.01, 1.1, 1.2, 1.02 |