Unrated severityNVD Advisory· Published Feb 14, 2012· Updated Apr 29, 2026

CVE-2012-1058

Description

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

Affected products

Flyspray/Flyspray
cpe:2.3:a:flyspray:flyspray:0.9.9.6:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.htmlnvdExploit
www.exploit-db.com/exploits/18468nvdExploit
secunia.com/advisories/47881nvdVendor Advisory
osvdb.org/78923nvd
exchange.xforce.ibmcloud.com/vulnerabilities/73051nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000