CVE-2010-2294

MEDIO 6.8CVE-2010-2294 · Published 15/06/2010 · updated 16/06/2026

In breve

CVE-2010-2294 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda plume-cms (pxsystem).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.58%, superiore al 48.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
plume-cms pxsystem	`≤ 1.2.4`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.

References

secunia.com/advisories/40133 · Vendor Advisory
securityfocus.com/archive/1/511761/100/0/threaded
vupen.com/english/advisories/2010/1430 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/59308

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free