ID de Prueba:	1.3.6.1.4.1.25623.1.0.801281
Categoría:	Web application abuses
Título:	TWiki Cross-Site Request Forgery Vulnerability (Sep 2010)
Resumen:	TWiki is prone to a cross-site request forgery (CSRF) vulnerability.
Descripción:	Summary: TWiki is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: Attack can be done by tricking an authenticated TWiki user into visiting a static HTML page on another side, where a Javascript enabled browser will send an HTTP POST request to TWiki, which in turn will process the request as the TWiki user. Vulnerability Impact: Successful exploitation will allow attacker to gain administrative privileges on the target application and can cause CSRF attack. Affected Software/OS: TWiki version prior to 4.3.2 Solution: Upgrade to TWiki version 4.3.2 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4898 http://www.openwall.com/lists/oss-security/2010/08/02/17 http://www.openwall.com/lists/oss-security/2010/08/03/8
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.