Skip to content
Medium Published: Dec 31, 2004 Modified: Apr 03, 2025

CVE-2004-1995

6.5 CVSS Score Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Export CVE-2004-1995 Data:
Share:
Link copied!

Description

Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity High
Availability None

Affected Software Configurations

  • a fusetalk fusetalk 2.0 - * * * * * *

Weaknesses (CWE)

  • CWE-352

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2002-2426 CVSS 0 Same weakness: CWE-352 CVE-2004-1967 CVSS 8.8 Same weakness: CWE-352 CVE-2004-1703 CVSS 8.8 Same weakness: CWE-352 CVE-2004-1842 CVSS 8.8 Same weakness: CWE-352 CVE-2005-1674 CVSS 6.5 Same weakness: CWE-352

CVE History Timeline

May 26, 2005 14:20 Initial Analysis
Oct 18, 2016 03:04 CVE Modified
Jul 11, 2017 01:31 CVE Modified
Feb 08, 2024 20:46 Modified Analysis
May 14, 2024 01:27 CVE Modified
Nov 20, 2024 23:52 CVE Modified
← Back to CVE Tracker