Back to search
CVE-2010-2111
Published: May 28, 2010
Modified: Aug 7, 2024
PUBLISHED
Description
Cross-site request forgery (CSRF) vulnerability in user/user-set.do in Pacific Timesheet 6.74 build 363 allows remote attackers to hijack the authentication of administrators for requests that create a new administrator via a new_admin action.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
39951
third-party-advisory
x_refsource_SECUNIA
64924
vdb-entry
x_refsource_OSVDB
pacific-timesheet-unspecified-csrf(58934)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now