CVE-2011-5196

中危 6.8CVE-2011-5196 · Published 23/09/2012 · updated 16/06/2026

要点

CVE-2011-5196 是影响 open journal systems (public knowledge project) 的中危 (CVSS 6.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.3%，高于 71.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
open journal systems public_knowledge_project	`= 1.0= 1.0.1= 1.1= 1.1.10= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0= 2.0.1= 2.0.2-1= 2.1= 2.1.1= 2.2= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.3.0= 2.3.1-2= 2.3.2= 2.3.2-1= 2.3.3= 2.3.3-1= 2.3.3-2= 2.3.3-3= 2.3.4= 2.3.5≤ 2.3.6`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files.

References

open journal systems 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

open journal systems

public_knowledge_project

= 1.0= 1.0.1= 1.1= 1.1.10= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0= 2.0.1= 2.0.2-1= 2.1= 2.1.1= 2.2= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.3.0= 2.3.1-2= 2.3.2= 2.3.2-1= 2.3.3= 2.3.3-1= 2.3.3-2= 2.3.3-3= 2.3.4= 2.3.5≤ 2.3.6

No fix yet

open journal systems 的其他漏洞

查看全部 →