CVE-2012-1058

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

CVSS v2.0 NVD

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.89% chance of exploitation in the next 30 days, 59th percentile

Published

2012-02-14

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18468

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18468

Security advisories

• http://secunia.com/advisories/47881

References

• CVE Record
• NVD entry