Skip to content

CVE-2011-5197 Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of...

MediumCVSS 6.8 EPSS 2.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files.

Affected products

ProductAffected versionsFixed in
public knowledge project open harvester systems <= 2.3.1 No fix listed
public knowledge project open harvester systems = 1.0 No fix listed
public knowledge project open harvester systems = 1.0.1 No fix listed
public knowledge project open harvester systems = 2.0.0 No fix listed
public knowledge project open harvester systems = 2.0.1 No fix listed
public knowledge project open harvester systems = 2.3.0 No fix listed

References