CVE-2010-3024

no score yetEPSS 1.4%

hulihanapplications diamondlist: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2010-08-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hulihanapplications:diamondlist

References

http://dev.hulihanapplications.com/issues/show/212
http://marc.info/?l=bugtraq&m=128104130309426&w=2
http://osvdb.org/66918
http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt
http://secunia.com/advisories/40873

Check your stack JSON