Back to feed
EUVD-2008-0277 · Published Jan 15, 2008
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.
Technologies
Eticket Eticket
Weaknesses
CWE-352
CVSS scores
- v2.02.6
AV:N/AC:H/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
