CVE-2010-1648

CVE-2010-1648 is a Cross-Site Request Forgery (CSRF) vulnerability affecting MediaWiki versions 1.15 prior to 1.15.4 and 1.16 prior to 1.16 beta 3. This flaw allows remote attackers to hijack user authentication through the Special:Userlogin form, potentially leading to unauthorized account creation or password resets. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely with medium attack complexity, and successful exploitation could result in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, and no public exploit code or Metasploit modules are available. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and exploitation interest.