CVE-2010-3883

Description

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.

References

http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/

http://secunia.com/advisories/40031

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS