CVE-2012-1058

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.92%

Published

Feb 13, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBFlyspray 0.9.9.6 - Cross-Site Request Forgery TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

Weaknesses (CWE)

CWE-352

Affected Products (1)

flyspray · flysprayvulnerable

References (10)

http://osvdb.org/78923

http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html

Exploit

http://secunia.com/advisories/47881

Vendor Advisory

http://www.exploit-db.com/exploits/18468

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73051

http://osvdb.org/78923

http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html

Exploit

http://secunia.com/advisories/47881

Vendor Advisory

http://www.exploit-db.com/exploits/18468

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73051

KEV Catalog EPSS Scores Vendors All CVEs