Subrion CMS Cross Site Request Forgery Vulnerability
BID:65752
Info
Subrion CMS Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 65752 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 22 2014 12:00AM |
| Updated: | Feb 22 2014 12:00AM |
| Credit: | TUNISIAN CYBER |
| Vulnerable: |
Subrion Subrion 3.1.1 |
| Not Vulnerable: | |
Discussion
Subrion CMS Cross Site Request Forgery Vulnerability
Subrion CMS is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Subrion CMS 3.1.1 is vulnerable; other versions may also be affected.
Subrion CMS is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Subrion CMS 3.1.1 is vulnerable; other versions may also be affected.
Exploit / POC
Subrion CMS Cross Site Request Forgery Vulnerability
To exploit this issue the attacker needs to entice a user into following a malicious URI.
The following example data is available:
To exploit this issue the attacker needs to entice a user into following a malicious URI.
The following example data is available:
Solution / Fix
Subrion CMS Cross Site Request Forgery Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].