CVE-2010-5085

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.

• CWE-352

• http://dev.hulihanapplications.com/issues/show/208Exploit
• http://marc.info/?l=bugtraq&m=128104795219200&w=2Exploit
• http://secunia.com/advisories/40874Vendor Advisory
• http://www.htbridge.ch/advisory/xsrf_csrf_in_amethyst.htmlExploit
• http://www.osvdb.org/67043
• http://www.vupen.com/english/advisories/2010/2022Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60947
• http://dev.hulihanapplications.com/issues/show/208Exploit
• http://marc.info/?l=bugtraq&m=128104795219200&w=2Exploit
• http://secunia.com/advisories/40874Vendor Advisory
• http://www.htbridge.ch/advisory/xsrf_csrf_in_amethyst.htmlExploit
• http://www.osvdb.org/67043
• http://www.vupen.com/english/advisories/2010/2022Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60947

Published

Feb 14, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-5079SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses…
• CVE-2010-5080The Security/changepassword URL action in SilverStripe 2.3.x…
• CVE-2010-5081Stack-based buffer overflow in Mini-Stream RM-MP3 Converter …
• CVE-2010-5082Untrusted search path vulnerability in colorcpl.exe 6.0.6000…
• CVE-2010-5083SQL injection vulnerability in the Web_Links module for PHP-…
• CVE-2010-5084The cross-site request forgery (CSRF) protection mechanism i…
• CVE-2010-5086Directory traversal vulnerability in wiki/rankings.php in Bi…
• CVE-2010-5087SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allo…
• CVE-2010-5088Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-5089SilverStripe before 2.4.2 does not properly restrict access …
• CVE-2010-5090SilverStripe before 2.4.2 allows remote authenticated users …
• CVE-2010-5091The setName function in filesystem/File.php in SilverStripe …