IQID:12630 HTTP Advanced Electron Forum CSRF Vulnerability_1 (To Server) S

IQID: 12630 - February 2016

In Admin panel no CSRF protection exist in multiple areas allowing remote attackers to make HTTP request on behalf of the victim if they currently have a valid session (logged in) and visit or click an infected link.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.