exploitDog

GHSA-8vpp-hw3q-63mw

Опубликовано: 21 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.

Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2010-3305
https://access.redhat.com/security/cve/cve-2010-3305
https://security-tracker.debian.org/tracker/CVE-2010-3305
https://www.exploit-db.com/exploits/15014
https://www.openwall.com/lists/oss-security/2010/09/17/7

EPSS

Процентиль: 60%

0.01009

Низкий

CVE ID

Связанные уязвимости

CVE-2010-3305

CVSS3: 8.8

ubuntu

почти 7 лет назад

Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.

CVE-2010-3305

CVSS3: 8.8

nvd

почти 7 лет назад

Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.

CVE-2010-3305

CVSS3: 8.8

debian

почти 7 лет назад

Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 cou ...

EPSS

Процентиль: 60%

0.01009

Низкий

CVE ID