CVE

Id
49394  
CVE No.
CVE-2011-1482  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536160 49394 CVE-2011-1482 MLIST:[oss-security] 20110323 CVE Request: PHP-Nuke 8.x <= Cross Site Request Forgery (CSRF) / Anti-CSRF Bypass Vulnerability  View
536161 49394 CVE-2011-1482 URL:http://www.openwall.com/lists/oss-security/2011/03/23/9  View
536162 49394 CVE-2011-1482 MLIST:[oss-security] 20110330 Re: CVE Request: PHP-Nuke 8.x <= Cross Site Request Forgery (CSRF) / Anti-CSRF Bypass Vulnerability  View
536163 49394 CVE-2011-1482 URL:http://www.openwall.com/lists/oss-security/2011/03/30/8  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31357 JVNDB-2011-001597 Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性 Perl の lc、lcfirst、uc および ucfirst 関数は、汚染された入力の戻り値を Taint 属性として適用させないため、Taint 保護メカニズムを回避される脆弱性が存在します。 CVE-2011-1487 49394 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001597.html  View