CVE-2011-1954 Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblo...
MediumCVSS 6.8
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postrev post revolution | <= 0.8.0c-2 | No fix listed |
| postrev post revolution | = 0.6.2-beta | No fix listed |
| postrev post revolution | = 0.6.3-beta | No fix listed |
| postrev post revolution | = 0.6.4 | No fix listed |
| postrev post revolution | = 0.6.5 | No fix listed |
| postrev post revolution | = 0.6.6 | No fix listed |
| postrev post revolution | = 0.7.0-rc1 | No fix listed |
| postrev post revolution | = 0.7.0-rc2 | No fix listed |
| postrev post revolution | = 0.7.0-rc3 | No fix listed |
| postrev post revolution | = 0.7.0-rc4 | No fix listed |
| postrev post revolution | = 0.8.0-alpha | No fix listed |
| postrev post revolution | = 0.8.0b | No fix listed |
| postrev post revolution | = 0.8.0c | No fix listed |
References
- javierb.com.ar
- 72641 vdb-entry
- postrev.com.ar
- 44710 third-party-advisory
- 8270 third-party-advisory
- 20110601 Post Revolution 0.8.0c Multiple Remote Vulnerabilities mailing-list