CVE-2013-2628

Published: Dec 21, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, related to the lack of an anti-CSRF token.

Affected (1)

Products: Idleman: Leed

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Idleman Leed	Up to 1.4

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (6)

http://osvdb.org/101154

Source: cve@mitre.org

http://seclists.org/bugtraq/2013/Dec/107

Source: cve@mitre.org

Exploit

http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt

Source: cve@mitre.org

Exploit

http://osvdb.org/101154

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/bugtraq/2013/Dec/107

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.