NuytsTech Security

CVE-2007-5060

by ·

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp values.

Date published : 2007-09-24

http://www.securityfocus.com/bid/25771

http://www.securityfocus.com/archive/1/480326/100/0/threaded

Tags: