CVE-2014-4333

MEDIUM · 6.8 CVSS Gepubliceerd: 19-06-2014 CWE-352

Beschrijving

Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.

Vendors

Boonex

Affected products

Dolphin

References

www.boonex.com
www.securityfocus.com
www.htbridge.com