CVE-2010-2282

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-15 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password.

Affected products

Tomatocms: 2.0.6

References

http://holisticinfosec.org/content/view/148/45/
http://secunia.com/advisories/39680
http://holisticinfosec.org/content/view/148/45/
http://secunia.com/advisories/39680

Get alerted when CVE-2010-2282 or the next vulnerability affects your stack