Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2012-4002

EPSS 0.20% · P42
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-4002

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GLPI 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GLPI是Indepnet协会维护的一款开源的IT资源管理套件。该套件包含设备状态管理、资产清单存储、管理流程和工作日志管理等功能。 GLPI 早期版本至0.83.3版本中存在跨站请求伪造漏洞，该漏洞源于对用户提供的输入未经正确验证。攻击者可利用该漏洞在受影响站点上下文中不知情用户浏览器中执行任意脚本代码，窃取基于cookie的认证证书，进而泄露或修改敏感信息，或执行未授权操作，也可能存在其他攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2012-4002

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2012-4002

请登录查看更多情报信息。

Same Patch Batch · n/a · 2012-10-09 · 63 CVEs total

CVE-2012-5348MangosWeb Enhanced ‘Login’SQL注入漏洞
CVE-2012-4399CakePHP 权限许可和访问控制漏洞
CVE-2012-4453dracut 权限许可和访问控制问题漏洞
CVE-2012-4452Oracle MySQL 权限许可和访问控制问题漏洞
CVE-2012-4418Apache Axis2 XML Signature Wrapping 安全漏洞
CVE-2012-2520InfoPath 2013跨站脚本漏洞
CVE-2012-0182Microsoft Word 代码注入漏洞
CVE-2012-3436OpenTTD Water Clearing 拒绝服务漏洞
CVE-2012-5350WordPress Pay With Tweet插件SQL注入漏洞
CVE-2012-5349WordPress ‘Pay With Tweet’插件多个跨站脚本漏洞
CVE-2012-2528Microsoft Word 资源管理错误漏洞
CVE-2012-5347TinyWebGallery多个远程命令执行漏洞
CVE-2012-5346WordPress WP Live.php插件 ‘s’ 参数跨站脚本漏洞
CVE-2012-5345IPtools远程缓冲区溢出漏洞
CVE-2012-5344IpTools Tiny TCP/IP servers目录遍历漏洞
CVE-2012-5343Limny ‘login.php’ 跨站脚本漏洞
CVE-2012-5342SenseSites CommonSense CMS 多个SQL注入漏洞
CVE-2012-5341Otterware StatIt 多个跨站脚本漏洞
CVE-2012-4457OpenStack Keystone 令牌验证安全绕过漏洞
CVE-2012-4456OpenStack Keystone Essex 授权问题漏洞

Showing top 20 of 63 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2012-4002

No comments yet

Leave a comment