CVE-2011-1341 Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests tha...
MediumCVSS 6.8
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aimluck aipo | <= 4.0.3.0 | No fix listed |
| aimluck aipo | = 4.0.1.0 | No fix listed |
| aimluck aipo | = 4.0.2.0 | No fix listed |
| aimluck aipo-asp | <= 3.0.1.0 | No fix listed |
References
- jvn.jp patch
- JVN#72854072 third-party-advisory
- JVNDB-2011-000062 patch third-party-advisory