CVE

Id
48660  
CVE No.
CVE-2011-0748  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.  
Phase
Assigned (20110202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
529047 48660 CVE-2011-0748 BUGTRAQ:20110407 phplist: cross site request forgery (CSRF), CVE-2011-0748  View
529048 48660 CVE-2011-0748 URL:http://www.securityfocus.com/archive/1/archive/1/517400/100/0/threaded  View
529049 48660 CVE-2011-0748 EXPLOIT-DB:18419  View
529050 48660 CVE-2011-0748 URL:http://www.exploit-db.com/exploits/18419  View
529051 48660 CVE-2011-0748 MISC:http://int21.de/cve/CVE-2011-0748-phplist.html  View
529052 48660 CVE-2011-0748 CONFIRM:http://www.phplist.com/?lid=516  View
529053 48660 CVE-2011-0748 BID:51681  View
529054 48660 CVE-2011-0748 URL:http://www.securityfocus.com/bid/51681  View
529055 48660 CVE-2011-0748 OSVDB:78549  View
529056 48660 CVE-2011-0748 URL:http://osvdb.org/78549  View
529057 48660 CVE-2011-0748 SECUNIA:44041  View
529058 48660 CVE-2011-0748 URL:http://secunia.com/advisories/44041  View
529059 48660 CVE-2011-0748 SREASON:8199  View
529060 48660 CVE-2011-0748 URL:http://securityreason.com/securityalert/8199  View
529061 48660 CVE-2011-0748 XF:phplist-admin-csrf(72746)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36983 JVNDB-2010-002763 PHP の PCNTL 拡張におけるサービス運用妨害 (DoS) の脆弱性 PHP の PCNTL 拡張は、ユーザ定義シグナルハンドラが存在している際、競合状態となり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0753 48660 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002763.html  View