CVE-2010-3603

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote…

published September 24, 2010

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to be moved, leading to a denial of service (service stop) and possibly the exposure of sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02457 · 84.3th percentile
Published
2010-09-24T19:44Z
EPSS history
Timeline
  • 24 SEP 19:44Z
    Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote…
    cvelistv5