CVE:CVE-2012-4326
CNNVD:CNNVD-201208-198
AlstraSoft Site Uptime Enterprise 5.4版本中的commonsettings.php中存在跨站请求伪造(CSRF)漏洞。远程攻击者可利用该漏洞劫持管理员身份验证。
solution:Upgrade altrasoft site_uptime_enterprise to a higher version than 5.4,and avoid the version 5.4