CVE-2012-1220

CVE-2012-1220 describes a Cross-Site Request Forgery (CSRF) vulnerability in the modules/config/admin_utente.php component of GAzie 5.20 and earlier. This flaw allows remote attackers to hijack authenticated administrator sessions, enabling them to perform actions like changing account information, specifically passwords. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, indicating that an attacker could exploit it over a network with moderate complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit (EDB-18464) is publicly available on ExploitDB, though community discussion and media coverage remain minimal.