Description

Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/.

Remediation

References

CVE-2014-2916

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View Security Bypass (1.4.13)

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.13)

WordPress Plugin Social Essentials-Social Stats and Sharing Buttons Cross-Site Scripting (1.3.1)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5016)

Severity

Medium

Classification

CVE-2014-2916 CWE-352

Tags

Missing Update Known Vulnerabilities