mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
784 B
784 B
CVE-2013-6826
Description
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.
POC
Reference
- http://packetstormsecurity.com/files/123980/fortianalyzer-xsrf.txt
- http://packetstormsecurity.com/files/123980/fortianalyzer-xsrf.txt
Github
No PoCs found on GitHub currently.