CVE-2008-3759

概要

参考情報

• lussumo.com/bugs/discussion/91/ajaxupdatecheckphp-csrf-vulnerability · Exploit
• lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1
• lussumo.com/docs/doku.php
• secunia.com/advisories/31527 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/44558

vanilla のその他の脆弱性

• CVE-2010-1337高 7.5Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allo…
• CVE-2009-1845中 4.3Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitr…
• CVE-2008-3874低 3.5Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users t…
• CVE-2008-3760中 4.3Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the auth…
• CVE-2008-3758中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web …