extplorer Cross Site Request Forgery Vulnerability
BID:54431
Info
extplorer Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 54431 |
| Class: | Design Error |
| CVE: |
CVE-2012-3362 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 12 2012 12:00AM |
| Updated: | Jul 12 2012 12:00AM |
| Credit: | John Leitch |
| Vulnerable: |
eXtplorer eXtplorer 2.1 RC3 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Exploit / POC
extplorer Cross Site Request Forgery Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
References
extplorer Cross Site Request Forgery Vulnerability
References:
References:
- [CVE-2012-3362] extplorer CSRF : 678737 (Debian)
- eXtplorer Homepage (eXtplorer)
- [CVE-2012-3362] extplorer - Cross-site request forgery : DSA-2510-1 (Debian)
- eXtplorer 2.1 RC3 Cross-site Request Forgery (AutoSec Tools)