CVE-2010-3603

no score yetEPSS 2.5%

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to be moved, leading to a denial of service (service stop) and possibly the exposure of sensitive information.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2010-09-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sourcetreesolutions:mojoportal

References

http://osvdb.org/68060
http://packetstormsecurity.org/1009-advisories/moaub16-mojoportal.pdf
http://packetstormsecurity.org/1009-exploits/moaub-mojoportal.txt
http://secunia.com/advisories/41481
http://www.exploit-db.com/exploits/15018

Check your stack JSON