[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-3603

Date: (C)2010-09-24   (M)2017-08-18 


Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to be moved, leading to a denial of service (service stop) and possibly the exposure of sensitive information.

CVSS Score: 6.8Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL





Reference:
EXPLOIT-DB-15018
SECUNIA-41481
OSVDB-68060
http://packetstormsecurity.org/1009-advisories/moaub16-mojoportal.pdf
http://packetstormsecurity.org/1009-exploits/moaub-mojoportal.txt
http://www.mojoportal.com/mojoportal-2352-released.aspx
mojoportal-fileservice-csrf(61834)

CWE    1
CWE-352

© 2013 SecPod Technologies