CVE-2012-0829

Published: Feb 14, 2012Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequences via the (1) address or (2) threadid parameters to operator/ban.php; or (3) geolinkparams, (4) title, or (5) chattitle parameters to operator/settings.php.

Affected (16)

Products: Mibew: Mibew Messenger

Mibew

1 product

Mibew Messenger

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mibew Mibew Messenger	Up to 1.6.4
Mibew Mibew Messenger	Version 1.0.10
Mibew Mibew Messenger	Version 1.0.6
Mibew Mibew Messenger	Version 1.0.7
Mibew Mibew Messenger	Version 1.0.8
Mibew Mibew Messenger	Version 1.0.9
Mibew Mibew Messenger	Version 1.4.0
Mibew Mibew Messenger	Version 1.4.1
Mibew Mibew Messenger	Version 1.4.2
Mibew Mibew Messenger	Version 1.5.0
Mibew Mibew Messenger	Version 1.5.1
Mibew Mibew Messenger	Version 1.5.2
Mibew Mibew Messenger	Version 1.6.0
Mibew Mibew Messenger	Version 1.6.1
Mibew Mibew Messenger	Version 1.6.2
Mibew Mibew Messenger	Version 1.6.3