medium5.1
CVE-2005-3129
Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user vi…
Impact
Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S9y | Serendipity | through 0.8.4 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html
- http://marc.info/?l=bugtraq&m=112801570631203&w=2
- http://secunia.com/advisories/17011/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22456
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html
- http://marc.info/?l=bugtraq&m=112801570631203&w=2
- http://secunia.com/advisories/17011/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22456