Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2013-4240
PUBLISHED
More InfoOfficial Page
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
View Known Exploited Vulnerability (KEV) details
Published At-02 Apr, 2014 | 14:00
Updated At-06 Aug, 2024 | 16:38
Rejected At-
▼CVE Numbering Authority (CNA)

Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add new testimonials via the hms-testimonials-addnew page, (2) add new groups via the hms-testimonials-addnewgroup page, (3) change default settings via the hms-testimonials-settings page, (4) change advanced settings via the hms-testimonials-settings-advanced page, (5) change custom fields settings via the hms-testimonials-settings-fields page, or (6) change template settings via the hms-testimonials-templates-new page to wp-admin/admin.php.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://seclists.org/oss-sec/2013/q3/361
mailing-list
x_refsource_MLIST
http://seclists.org/oss-sec/2013/q3/345
mailing-list
x_refsource_MLIST
http://seclists.org/fulldisclosure/2013/Aug/98
mailing-list
x_refsource_FULLDISC
http://wordpress.org/plugins/hms-testimonials/changelog
x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2013/Aug/96
mailing-list
x_refsource_FULLDISC
http://osvdb.org/96107
vdb-entry
x_refsource_OSVDB
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://seclists.org/oss-sec/2013/q3/361
mailing-list
x_refsource_MLIST
x_transferred
http://seclists.org/oss-sec/2013/q3/345
mailing-list
x_refsource_MLIST
x_transferred
http://seclists.org/fulldisclosure/2013/Aug/98
mailing-list
x_refsource_FULLDISC
x_transferred
http://wordpress.org/plugins/hms-testimonials/changelog
x_refsource_CONFIRM
x_transferred
http://seclists.org/fulldisclosure/2013/Aug/96
mailing-list
x_refsource_FULLDISC
x_transferred
http://osvdb.org/96107
vdb-entry
x_refsource_OSVDB
x_transferred
Details not found