ID de Prueba:	1.3.6.1.4.1.25623.1.0.800296
Categoría:	Web application abuses
Título:	Limny < 2.01 Multiple CSRF Vulnerabilities
Resumen:	Limny is prone to multiple cross-site request forgery (CSRF) vulnerabilities.
Descripción:	Summary: Limny is prone to multiple cross-site request forgery (CSRF) vulnerabilities. Vulnerability Insight: Multiple flaws are caused by improper validation of user-supplied input, which allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. Vulnerability Impact: Successful exploitation will allow remote attackers to change the administrative password or email address and add a new user by tricking an administrative user into visiting a malicious web site. Affected Software/OS: Limny version 2.0. Solution: Update to version 2.01 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0709 http://www.exploit-db.com/exploits/11477 http://www.exploit-db.com/exploits/11478 http://osvdb.org/62389 http://secunia.com/advisories/38616 XForce ISS Database: limny-admin-csrf(56318) https://exchange.xforce.ibmcloud.com/vulnerabilities/56318
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.