Cross-site request forgery (CSRF)... CVE-2007-6390

4.3 AV AC AU C I A
发布： 2007-12-17
修订： 2008-09-05

Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息