Wampserver before 3.1.3 has CSRF in add_vhost.php.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://www.exploit-db.com/exploits/44385/ | exploit vdb entry third party advisory |
http://forum.wampserver.com/read.php?2%2C138295%2C150722%2Cpage=6#msg-150722 | |
https://seclists.org/bugtraq/2019/Jun/10 | mailing list |