CVE-2011-3582 A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.
HighCVSS 8.8
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| anelectron advanced electron forums | <= 1.0.9 | No fix listed |
| electron Advanced Electron Forums (AEF) | = through 1.0.9 | No fix listed |
References
- www.openwall.com exploit mailing-list patch third-party-advisory