Security Advisory

CVE-2011-3994

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-11-03 17:00:00

Last updated 2024-09-17 00:50:31

Assigner jpcert

CVSS score not scored

State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.

← Browse all CVEs View on cve.org ↗