CVE

Id
28929  
CVE No.
CVE-2007-5572  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete actions as administrators via (1) the block_id parameter to add_block.php or (2) the link_id parameter to add_link.php.  
Phase
Assigned (20071018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
303106 28929 CVE-2007-5572 BUGTRAQ:20071017 Multiple CSRF in SimplePHPBlog  View
303107 28929 CVE-2007-5572 URL:http://www.securityfocus.com/archive/1/archive/1/482422/100/0/threaded  View
303108 28929 CVE-2007-5572 MISC:http://hackish.altervista.org/forum/viewtopic.php?t=221  View
303109 28929 CVE-2007-5572 SECUNIA:27264  View
303110 28929 CVE-2007-5572 URL:http://secunia.com/advisories/27264  View
303111 28929 CVE-2007-5572 XF:simplephpblog-addblock-csrf(37238)  View
303112 28929 CVE-2007-5572 URL:http://xforce.iss.net/xforce/xfdb/37238  View
303113 28929 CVE-2007-5572 XF:simplephpblog-addlink-csrf(37239)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57546 JVNDB-2007-006238 PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性 PHPDJ の djpage.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5574 28929 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006238.html  View