Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/03/2011 Updated: 22/09/2011

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote malicious users to hijack the authentication of administrators.

Vulnerable Product	Search on Vulmon	Subscribe to Product
blogcms blog\\ cms

Vulnerability ID: HTB22727 Reference: wwwhtbridgech/advisory/xsrf_csrf_in_blogcmshtml Product: BLOG:CMS Vendor: Radek Hulán ( blogcmscom/ ) Vulnerable Version: 421e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF (Cross-Site Request Forgery) Status: Not Fixed, Vendor Alerted Risk le ...

CWE-352 http://blogcms.com/http://www.exploit-db.com/exploits/15743 http://packetstormsecurity.org/files/view/96731/blogcms-xsrfxss.txt http://www.htbridge.ch/advisory/xsrf_csrf_in_blogcms.html http://securityreason.com/securityalert/8112 https://nvd.nist.gov https://www.exploit-db.com/exploits/15743/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4750

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect