CVE-2013-2628 | BDVDB-2026-59017 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, related to the lack of an anti-CSRF token.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2013/Dec/107
http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt
http://osvdb.org/101154

Exploit#

No public exploit known

History#

Version 12013-12-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.