CVE-2012-1058

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

CVSS v2.0

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.92% chance of exploitation in the next 30 days, 58th percentile

Published

2012-02-14

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18468

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18468

References

• CVE Record
• NVD entry

Related

• CVE-2012-1049
• CVE-2012-1059
• CVE-2012-1048
• CVE-2012-1065
• CVE-2012-1047
• CVE-2012-1069