A vulnerability has been reported in PG Portal Pro, which can be exploited by malicious people to conduct cross-site forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change the administrators password if the logged-in administrative user visits a malicious web site.

Solution
No official solution is currently available.

Provided and/or discovered by
Noxious

Deep Links
Links available to Secunia VIM customers