CVE-2008-3759 Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack vectors.
HighCVSS 7.5
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lussumo vanilla | <= 1.1.4 | No fix listed |
| lussumo vanilla | = 0.9.2 | No fix listed |
| lussumo vanilla | = 1 | No fix listed |
| lussumo vanilla | = 1.0.1 | No fix listed |
| lussumo vanilla | = 1.0.2 | No fix listed |
| lussumo vanilla | = 1.0.3 | No fix listed |
| lussumo vanilla | = 1.1 | No fix listed |
| lussumo vanilla | = 1.1.1 | No fix listed |
| lussumo vanilla | = 1.1.2 | No fix listed |
| lussumo vanilla | = 1.1.3 | No fix listed |
References
- lussumo.com exploit
- lussumo.com
- lussumo.com
- 31527 third-party-advisory vendor-advisory
- vanilla-updatecheck-people-csrf(44558) vdb-entry