6.8

CVE-2013-2754

Exploit
Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Umi-cms ≫ Umi.Cms Version <= 2.9
Umi-cms ≫ Umi.Cms Version2.3.3.9
Umi-cms ≫ Umi.Cms Version2.5.0
Umi-cms ≫ Umi.Cms Version2.5.2
Umi-cms ≫ Umi.Cms Version2.5.3
Umi-cms ≫ Umi.Cms Version2.6
Umi-cms ≫ Umi.Cms Version2.6.1
Umi-cms ≫ Umi.Cms Version2.6.2
Umi-cms ≫ Umi.Cms Version2.6.3
Umi-cms ≫ Umi.Cms Version2.6.4
Umi-cms ≫ Umi.Cms Version2.6.5
Umi-cms ≫ Umi.Cms Version2.6.7
Umi-cms ≫ Umi.Cms Version2.6.8
Umi-cms ≫ Umi.Cms Version2.7.0
Umi-cms ≫ Umi.Cms Version2.7.2
Umi-cms ≫ Umi.Cms Version2.7.3
Umi-cms ≫ Umi.Cms Version2.7.4
Umi-cms ≫ Umi.Cms Version2.8.0
Umi-cms ≫ Umi.Cms Version2.8.0.5
Umi-cms ≫ Umi.Cms Version2.8.1
Umi-cms ≫ Umi.Cms Version2.8.1.2
Umi-cms ≫ Umi.Cms Version2.8.1.3
Umi-cms ≫ Umi.Cms Version2.8.2
Umi-cms ≫ Umi.Cms Version2.8.3
Umi-cms ≫ Umi.Cms Version2.8.4
Umi-cms ≫ Umi.Cms Version2.8.4.1
Umi-cms ≫ Umi.Cms Version2.8.4.2
Umi-cms ≫ Umi.Cms Version2.8.4.3
Umi-cms ≫ Umi.Cms Version2.8.4.4
Umi-cms ≫ Umi.Cms Version2.8.5
Umi-cms ≫ Umi.Cms Version2.8.5.1
Umi-cms ≫ Umi.Cms Version2.8.5.2
Umi-cms ≫ Umi.Cms Version2.8.5.3
Umi-cms ≫ Umi.Cms Version2.8.6
Umi-cms ≫ Umi.Cms Version2.8.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.27% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://archives.neohapsis.com/archives/bugtraq/2013-05/0029.html
Exploit
http://osvdb.org/93104
http://packetstormsecurity.com/files/121564/UMI.CMS-2.9-Cross-Site-Request-Forgery.html
Exploit
http://www.exploit-db.com/exploits/25449
Exploit
https://www.htbridge.com/advisory/HTB23151
Exploit