CVE-2012-5695 | BDVDB-2026-65468 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/87327
https://www.htbridge.com/advisory/HTB23123
https://twitter.com/georgiaweidman/statuses/269138431567855618
https://www.htbridge.com/advisory/HTB23127
https://exchange.xforce.ibmcloud.com/vulnerabilities/80313
http://secunia.com/advisories/51415

Exploit#

No public exploit known

History#

Version 12014-10-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.