CVE-2013-7209
published 2013-12-30CVE-2013-7209: Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of…
PriorityP433medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
2.81%
84.8th percentile
Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/101438http://packetstormsecurity.com/files/124598/JForum-Cross-Site-Request-Forgery.htmlhttp://seclists.org/fulldisclosure/2013/Dec/206http://osvdb.org/101438http://packetstormsecurity.com/files/124598/JForum-Cross-Site-Request-Forgery.htmlhttp://seclists.org/fulldisclosure/2013/Dec/206
2013-12-30
Published