Vessio NetBill 'accounts/admin/index.php' Cross Site Request Forgery vulnerability
BID:65219
Info
Vessio NetBill 'accounts/admin/index.php' Cross Site Request Forgery vulnerability
| Bugtraq ID: | 65219 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-6631 |
| Remote: | Yes |
| Local: | No |
| Published: | May 13 2012 12:00AM |
| Updated: | May 13 2012 12:00AM |
| Credit: | the_storm |
| Vulnerable: |
Vessio Netbill 1.2 |
| Not Vulnerable: | |
Exploit / POC
Vessio NetBill 'accounts/admin/index.php' Cross Site Request Forgery vulnerability
To exploit these issues an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit these issues an attacker must entice an unsuspecting victim to open a malicious URI.
References
Vessio NetBill 'accounts/admin/index.php' Cross Site Request Forgery vulnerability
References:
References:
- Vessio Homepage (Vessio)
- NetBill Billing System v1.2 - Multiple Web Vulnerabilites (Vulnerability Laboratory)