Description

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.

Remediation

References

CVE-2005-3129

Related Vulnerabilities

phpBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0544)

MediaWiki Uncontrolled Resource Consumption Vulnerability (CVE-2022-39194)

Moodle Incorrect Authorization Vulnerability (CVE-2021-20283)

Moodle Cryptographic Issues Vulnerability (CVE-2011-4303)

WordPress Plugin Search Unleashed 'Log' Function HTML Injection (0.2.10)

Severity

Medium

Classification

CVE-2005-3129

Tags

Missing Update Known Vulnerabilities