Description

Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter.

Remediation

References

CVE-2011-5131

Related Vulnerabilities

WordPress Plugin GS Portfolio for Envato Cross-Site Scripting (1.3.8)

Joomla CVE-2006-4472 Vulnerability (CVE-2006-4472)

WebLogic CVE-2020-2829 Vulnerability (CVE-2020-2829)

Oracle JRE CVE-2013-5848 Vulnerability (CVE-2013-5848)

OpenSSL Resource Management Errors Vulnerability (CVE-2006-2937)

Severity

Medium

Classification

CVE-2011-5131 CWE-352

Tags

Missing Update Known Vulnerabilities