{"id":"CVE-2010-2113","aliases":["EUVD-2010-2129","GHSA-c7jp-mf9p-5jw3"],"status":"published","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00693,"percentile":0.5314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2010-05-28T20:00:00Z","modified":"2026-06-16T23:20:00Z","products":[{"vendor":"uniformserver","product":"uniformserver"}],"references":[{"url":"http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://osvdb.org/64858","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58844","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/39913","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2113"},{"url":"https://github.com/advisories/GHSA-c7jp-mf9p-5jw3"}],"sources":{"cve":[{"id":"CVE-2010-2113","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.","status":"published","published":"2010-05-28T20:00:00Z","modified":"2024-08-07T02:25:05.84Z","updated_at":"2026-11-02T14:33:26.665532Z"}],"euvd":[{"id":"EUVD-2010-2129","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.","status":"published","published":"2010-05-28T20:00:00Z","modified":"2024-08-07T02:25:05Z","updated_at":"2026-11-03T01:39:38.920426Z"}],"ghsa":[{"id":"GHSA-c7jp-mf9p-5jw3","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.","status":"published","published":"2022-05-17T02:07:36Z","modified":"2023-01-27T05:03:07Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:42:10.716841Z"}],"nvd":[{"id":"CVE-2010-2113","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.","status":"published","published":"2010-05-28T20:30:01.487Z","modified":"2026-06-16T23:20:00.51Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:01:47.724369Z"}]}}