medium6.8
CVE-2011-3836
Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator, (2) perform cross-site scripting (XSS), (3) perform SQL injection, or have other unspecified impact via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzly | Wuzly | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/77911
- http://secunia.com/advisories/46163
- http://secunia.com/secunia_research/2011-85/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71901
- http://osvdb.org/77911
- http://secunia.com/advisories/46163
- http://secunia.com/secunia_research/2011-85/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71901