Description

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

Remediation

References

CVE-2006-2495

Related Vulnerabilities

WordPress Plugin Per page add to head Cross-Site Scripting (1.4.4)

Joomla CVE-2017-14595 Vulnerability (CVE-2017-14595)

Sqlite Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-45346)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20357)

WordPress Plugin Captcha by BestWebSoft Security Bypass (3.8.7)

Severity

High

Classification

CVE-2006-2495

Tags

Missing Update Known Vulnerabilities