CVE-2010-2113

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-05-28 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.

Affected products

Uniformserver: 5.6.5

References

http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html
http://osvdb.org/64858
http://secunia.com/advisories/39913
https://exchange.xforce.ibmcloud.com/vulnerabilities/58844
http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html
http://osvdb.org/64858
http://secunia.com/advisories/39913
https://exchange.xforce.ibmcloud.com/vulnerabilities/58844

Get alerted when CVE-2010-2113 or the next vulnerability affects your stack