Security Advisory
CVE-2008-5672
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.