CVE-2010-2039

{"id": "CVE-2010-2039", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": true}]}, "published": "2010-05-25T14:30:01.783", "references": [{"url": "http://packetstormsecurity.org/1004-exploits/gpeasy-xsrf.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/39643", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/12441", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/64130", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/1030", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58214", "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.org/1004-exploits/gpeasy-xsrf.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/39643", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/12441", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/64130", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/1030", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58214", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidades de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en gpEasy CMS v1.6.2, v1.6.1, y anteriores. Permite a atacantes remotos secuestrar (hijack) la autenticaci\u00f3n de administradores para peticiones que crean nuevos usuarios de administraci\u00f3n a trav\u00e9s de una acci\u00f3n Admin_Users a index.php. NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n procedente de terceras partes."}], "lastModified": "2024-11-21T01:15:46.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E40423B4-2E9C-4E00-BA2E-26426BF3CAB3", "versionEndIncluding": "1.6.2"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DF2976A-EBAD-4A71-87C7-58E4311904F8"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F1BC763-BA60-40C2-AC3A-10C817FAE0F3"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4000B360-BE2E-429D-9CEC-C0886C679384"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C4F029B-CF0E-41B0-8588-249DF0006922"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71F277EE-C80A-4D9A-BDCB-3075864A762B"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDC0182A-7D10-4ACF-B40D-716FF6967389"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "142F2215-449B-4615-8897-CCC481E087B4"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BC43ECE-9746-449C-B8F6-6F1BD60E3203"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D4581F3-DDD1-45FC-A875-9D519FCB2D8E"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0C0AD75-8598-4216-8EE1-91BA2D186A5B"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53E37F66-20A2-4FEC-8648-E9056AAA7774"}, {"criteria": "cpe:2.3:a:gpeasy:gpeasy_cms:1.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50EEA808-5C4B-43FF-8D04-FDE01638FBB5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}