Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php.
References
Configurations
History
No history.
Information
Published : 2015-03-23 16:59
Updated : 2016-12-03 03:05
NVD link : CVE-2015-2680
Mitre link : CVE-2015-2680
CVE.ORG link : CVE-2015-2680
JSON object : View
Products Affected
metalgenix
- genixcms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)