CVE-2005-1674

Опубликовано: 19 мая 2005

Источник: nvd

CVSS3: 6.5

CVSS2: 7.5

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.

Ссылки

http://www.gulftech.org/?node=research&article_id=00076-05172005
Broken Link
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00076-05172005
Broken Link
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:helpcenterlive:help_center_live:-:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00689

Низкий

6.5 Medium

CVSS3

7.5 High

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qj88-9fvw-xw2m