Unrated severityNVD Advisory· Published Feb 25, 2010· Updated Apr 29, 2026
CVE-2010-0711
CVE-2010-0711
Description
Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administrator for requests that (1) delete users via the delete action in the ma2 parameter or (2) create administrators via the update action in the ma2 parameter.
Affected products
2cpe:2.3:a:aspcodecms:aspcode_cms:1.5.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aspcodecms:aspcode_cms:1.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:aspcodecms:aspcode_cms:2.0.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- packetstormsecurity.org/1002-exploits/aspcodecms-xssxsrf.txtnvdExploit
- secunia.com/advisories/38596nvdVendor Advisory
- osvdb.org/62357nvd
News mentions
0No linked articles in our index yet.