NVD

Id
7595  
Name
CVE-2011-0535  
Description
Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-08  
Modified Date
2011-09-21  
Seq
2011-0535  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42860 7595 CVE-2011-0535 http://bl0g.yehg.net/2011/02/zikula-cms-124-cross-site-request.html  View
42861 7595 CVE-2011-0535 http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG  View
42862 7595 CVE-2011-0535 http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released  View
42863 7595 CVE-2011-0535 [oss-security] 20110201 CVE Request: Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability  View
42864 7595 CVE-2011-0535 [oss-security] 20110203 Re: CVE Request: Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability  View
42865 7595 CVE-2011-0535 20110201 Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability  View
42866 7595 CVE-2011-0535 8067  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33928 JVNDB-2011-004170 Zikula の Users モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Zikula の Users モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-0535 48442 CVE-2011-0535 7595 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004170.html 2011-02-08 2012-03-27 View