CVE-2013-6992

MEDIO 6.8CVE-2013-6992 · Published 03/01/2014 · updated 17/06/2026

In breve

CVE-2013-6992 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda firefox adsense (askapache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
firefox adsense askapache	`≤ 3.0`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the aafireadcode parameter to wp-admin/options-general.php.

References

osvdb.org/101435 · Exploit
securityfocus.com/archive/1/530539/100/0/threaded
securityfocus.com/bid/64534
htbridge.com/advisory/HTB23188 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free