PT-2012-5328
CVE-2012-4326
·
تاريخ النشر
2012-08-14
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
AlstraSoft Site Uptime Enterprise version 5.4
Description
A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of administrators. This occurs due to a vulnerability in the commonsettings.php file.
Recommendations
For version 5.4, update the commonsettings.php file to prevent CSRF attacks, ensuring that proper validation and verification of requests are in place to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾