Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.
References
Link | Resource |
---|---|
http://depo2.nm.ru/WebWiz_Forum_v9.5_CSRF.txt | Exploit |
http://secunia.com/advisories/31281 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/44011 |
Configurations
Information
Published : 2008-07-31 09:41
Updated : 2017-08-07 18:31
NVD link : CVE-2008-3392
Mitre link : CVE-2008-3392
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
webwizguide
- web_wiz_forum