Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Harmoni Versions Prior to 1.6.0 Cross-Site Request Forgery and Security Bypass Vulnerabilities

Harmoni is prone to a cross-site request-forgery vulnerability and a security-bypass vulnerability.

An attacker can exploit these issues to gain unauthorized accsss to the affected application, create new user accounts, and delete arbitrary content within the context of the affected application. Other attacks are also possible.

Versions prior to Harmoni 1.6.0 are vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus