Lucene search
HistoryJan 13, 2015 - 3:59 p.m.
CVE-2014-100025
cve-2014-100025
csrf
vulnerability
savsoft quiz
authentication
administrators
hijack
remote attackers
administrator account
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.1%
Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request.
Affected configurations
Node
savsoft_technologiessavsoft_quizMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| savsoft_technologies:savsoft_quiz | savsoft technologies savsoft quiz | eq | - |
Related
prion
prion
Cross site request forgery (csrf)
2015-01-13 15:59:00
cvelist
cvelist
CVE-2014-100025
2015-01-13 15:00:00
nvd
nvd
CVE-2014-100025
2015-01-13 15:59:26
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.1%
Related for CVE-2014-100025