Lucene search

K
cvelistMitreCVELIST:CVE-2011-5074
HistoryJan 29, 2012 - 11:00 a.m.

CVE-2011-5074

2012-01-2911:00:00
mitre
www.cve.org
3
cross-site request forgery
csrf
sit
authentication
administrators
remote attackers
vulnerabilities

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

72.4%

Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via (1) user_profile_edit.php or (2) user_add.php.

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

72.4%

Related for CVELIST:CVE-2011-5074