GeniXCMS CVE-2015-2680 Cross Site Request Forgery Vulnerability
BID:73299
Info
GeniXCMS CVE-2015-2680 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 73299 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2680 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2015 12:00AM |
| Updated: | Mar 10 2015 12:00AM |
| Credit: | Gjoko Krstic |
| Vulnerable: |
MetalGenix GeniXCMS 0.0.1 |
| Not Vulnerable: |
MetalGenix GeniXCMS 0.0.2 |
Discussion
GeniXCMS CVE-2015-2680 Cross Site Request Forgery Vulnerability
GeniXCMS is prone to a cross-site request-forgery vulnerability.
An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.
GeniXCMS 0.0.1 is vulnerable; other versions may also be affected.
GeniXCMS is prone to a cross-site request-forgery vulnerability.
An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.
GeniXCMS 0.0.1 is vulnerable; other versions may also be affected.
Exploit / POC
GeniXCMS CVE-2015-2680 Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.