CVE-2012-1415

Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2014-12-28

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Ptk (Dflabs)

References

• http://www.exploit-db.com/exploits/18513/