Description

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

Remediation

References

CVE-2006-2495

Related Vulnerabilities

PHP NULL Pointer Dereference Vulnerability (CVE-2017-9229)

WordPress Plugin Appointment Scheduling for Zoom GoogleMeet and more-Wappointment Cross-Site Scripting (2.2.4)

WebLogic CVE-2016-0577 Vulnerability (CVE-2016-0577)

IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1886)

WordPress Plugin Contact Form 7 Database Addon-CFDB7 Unspecified Vulnerability (1.2.5.3)

Severity

High

Classification

CVE-2006-2495

Tags

Missing Update Known Vulnerabilities