5
CVSSv2

CVE-2006-4582

Published: 31/12/2006 Updated: 20/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote malicious users to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php.

Vulnerable Product Search on Vulmon Subscribe to Product

the address book the address book 1.04e