VYPR
← All advisories
Unrated severityNVD Advisory· Published May 6, 2010· Updated Jun 16, 2026

CVE-2010-1732

CVE-2010-1732

Description

Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application Framework before 1.2.3 allows remote attackers to hijack the authentication of administrators for requests that change the administrator email address (updateemail action).

Affected products

2
  • Zikula/Zikula Application Framework2 versions
    cpe:2.3:a:zikula:zikula_application_framework:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:zikula:zikula_application_framework:*:*:*:*:*:*:*:*range: <=1.2.2
    • (no CPE)range: <1.2.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.