CSRF in X7 Group Chat
CVE-2012-6047
Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.
Affected products
- X7_group X7_chat — versions 1.0.0b, 1.1.1b, 1.1.2b
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)