ID de Prueba:	1.3.6.1.4.1.25623.1.0.800787
Categoría:	Web application abuses
Título:	Uniform Server Multiple CSRF Vulnerabilities
Resumen:	Uniform Server is prone to multiple Cross-Site Request Forgery vulnerabilities.
Descripción:	Summary: Uniform Server is prone to multiple Cross-Site Request Forgery vulnerabilities. Vulnerability Insight: The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. Vulnerability Impact: Successful exploitation will allow attackers to change the administrator's password by tricking a logged in administrator into visiting a malicious web site. Affected Software/OS: Uniform Server version 5.6.5 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2113 http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html http://osvdb.org/64858 http://secunia.com/advisories/39913 XForce ISS Database: uniform-server-unspecified-csrf(58844) https://exchange.xforce.ibmcloud.com/vulnerabilities/58844
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.