| Package | Affected versions | Patched versions |
|---|---|---|
| post revolution | = 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.7.0= 0.8.0= 0.8.0b= 0.8.0c≤ 0.8.0c-2 |
Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free