Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks, as demonstrated by CVE-2013-4888.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-01-29T18:00:00
Updated: 2024-08-06T16:59:41.021Z
Reserved: 2013-07-22T00:00:00
Link: CVE-2013-4889
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-01-29T18:55:26.730
Modified: 2024-11-21T01:56:39.317
Link: CVE-2013-4889
Redhat
No data.