Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/18513/ | Exploit |
Configurations
Information
Published : 2014-12-27 18:59
Updated : 2014-12-29 08:31
NVD link : CVE-2012-1415
Mitre link : CVE-2012-1415
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
dflabs
- ptk