Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) futils, or (3) edit actions.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2008-10-06T19:00:00
Updated: 2024-08-07T10:17:09.653Z
Reserved: 2008-10-06T00:00:00
Link: CVE-2008-4448
Vulnrichment
No data.
NVD
Status : Modified
Published: 2008-10-06T19:56:52.970
Modified: 2024-11-21T00:51:42.103
Link: CVE-2008-4448
Redhat
No data.