CVE-2007-0652 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0652
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0652

Description: Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

CVE Status: Candidate

References: SREASON http://securityreason.com/securityalert/2258 SAID Secunia Advisory: SA23998 OSVDB 33191 MISC http://secunia.com/secunia_research/2007-38/advisory/ BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/460063/100/0/threaded BID 22554

Return to the previous page.