CSRF in Gpeasy Cms
CVE-2010-2039
Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.012 (63.7th percentile) — read the EPSS interpretation.
Affected products
- Gpeasy Gpeasy_cms — versions 1.5, 1.6, 1.6.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2010-2039?
- CVE-2010-2039 is a vulnerability in Gpeasy Cms, classified under Cross-Site Request Forgery (CSRF). Published 2010-05-25.
- Is CVE-2010-2039 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.