VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 25, 2010· Updated Jun 16, 2026

CVE-2010-0711

CVE-2010-0711

Description

Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administrator for requests that (1) delete users via the delete action in the ma2 parameter or (2) create administrators via the update action in the ma2 parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Aspcodecms/Aspcode CMS2 versions
    cpe:2.3:a:aspcodecms:aspcode_cms:1.5.8:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:aspcodecms:aspcode_cms:1.5.8:*:*:*:*:*:*:*
    • cpe:2.3:a:aspcodecms:aspcode_cms:2.0.0:*:*:*:*:*:*:*
  • ASPCode/CMSllm-create
    Range: <=2.0.0 Build 103

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.