Description

Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter.

Remediation

References

CVE-2011-5131

Related Vulnerabilities

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3454)

WordPress Plugin Zotpress 'citation' Parameter Cross-Site Scripting (2.6.1)

Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767)

WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar SQL Injection (2.8.2)

Joomla! Core 1.0.x Unspecified Vulnerability (1.0.0 - 1.0.3)

Severity

Medium

Classification

CVE-2011-5131 CWE-352

Tags

Missing Update Known Vulnerabilities