CVE-2012-0286

Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.95% chance of exploitation in the next 30 days, 60th percentile

Published

2012-01-24

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18416

Security advisories

• http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf
• http://www.stone-ware.com/swql.jsp?kb=d1960

References

• CVE Record
• NVD entry