CVE-2008-3759

Mô tả

Tham khảo

• lussumo.com/bugs/discussion/91/ajaxupdatecheckphp-csrf-vulnerability · Exploit
• lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1
• lussumo.com/docs/doku.php
• secunia.com/advisories/31527 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/44558

Lỗ hổng khác của vanilla

• CVE-2010-1337CAO 7.5Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allo…
• CVE-2009-1845TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitr…
• CVE-2008-3874THẤP 3.5Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users t…
• CVE-2008-3760TRUNG BÌNH 4.3Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the auth…
• CVE-2008-3758TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web …