Vulnerability CVE-2006-4582
Published: 2006-12-31   Modified: 2012-02-12

Description:
Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php.

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
The address book -> The address book 

 References:
http://secunia.com/secunia_research/2006-76/advisory/
http://secunia.com/advisories/21694
http://osvdb.org/32559
http://xforce.iss.net/xforce/xfdb/31251
Copyright 2024, cxsecurity.com

 

Back to Top