Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of administrators for requests that conduct XSS attacks via the news_title parameter in a create action.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2013-01-03T11:00:00Z
Updated: 2024-09-16T20:26:18.204Z
Reserved: 2012-12-26T00:00:00Z
Link: CVE-2012-6433
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-01-03T11:54:26.527
Modified: 2024-11-21T01:46:07.000
Link: CVE-2012-6433
Redhat
No data.