Description

Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the show_statuses[] parameter, related to CVE-2013-2945.

Remediation

References

CVE-2013-7352

Related Vulnerabilities

MongoDb Improper Input Validation Vulnerability (CVE-2020-7925)

WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.3)

WordPress Plugin Wow Viral Signups SQL Injection (2.1)

Oracle Database Server CVE-2020-2517 Vulnerability (CVE-2020-2517)

Django CVE-2024-41989 Vulnerability (CVE-2024-41989)

Severity

Medium

Classification

CVE-2013-7352 CWE-352

Tags

Missing Update Known Vulnerabilities