6.8

CVE-2011-3381

Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phorum ≫ Phorum Version <= 5.2.15
Phorum ≫ Phorum Version3.0.7
Phorum ≫ Phorum Version3.1
Phorum ≫ Phorum Version3.1.1
Phorum ≫ Phorum Version3.1.1_pre
Phorum ≫ Phorum Version3.1.1_rc2
Phorum ≫ Phorum Version3.1.1a
Phorum ≫ Phorum Version3.1.2
Phorum ≫ Phorum Version3.2
Phorum ≫ Phorum Version3.2.2
Phorum ≫ Phorum Version3.2.3
Phorum ≫ Phorum Version3.2.3a
Phorum ≫ Phorum Version3.2.3b
Phorum ≫ Phorum Version3.2.4
Phorum ≫ Phorum Version3.2.5
Phorum ≫ Phorum Version3.2.6
Phorum ≫ Phorum Version3.2.7
Phorum ≫ Phorum Version3.2.8
Phorum ≫ Phorum Version3.3.1
Phorum ≫ Phorum Version3.3.1a
Phorum ≫ Phorum Version3.3.2
Phorum ≫ Phorum Version3.3.2a
Phorum ≫ Phorum Version3.3.2b3
Phorum ≫ Phorum Version3.4
Phorum ≫ Phorum Version3.4.1
Phorum ≫ Phorum Version3.4.2
Phorum ≫ Phorum Version3.4.3
Phorum ≫ Phorum Version3.4.4
Phorum ≫ Phorum Version3.4.5
Phorum ≫ Phorum Version3.4.6
Phorum ≫ Phorum Version3.4.7
Phorum ≫ Phorum Version3.4.8
Phorum ≫ Phorum Version3.4.8a
Phorum ≫ Phorum Version4.3.7
Phorum ≫ Phorum Version5.0.0_alpha
Phorum ≫ Phorum Version5.0.1_alpha
Phorum ≫ Phorum Version5.0.2_alpha
Phorum ≫ Phorum Version5.0.3_beta
Phorum ≫ Phorum Version5.0.4_beta
Phorum ≫ Phorum Version5.0.4a_beta
Phorum ≫ Phorum Version5.0.5_beta
Phorum ≫ Phorum Version5.0.6_beta
Phorum ≫ Phorum Version5.0.7_beta
Phorum ≫ Phorum Version5.0.7a_beta
Phorum ≫ Phorum Version5.0.8_rc
Phorum ≫ Phorum Version5.0.9
Phorum ≫ Phorum Version5.0.10
Phorum ≫ Phorum Version5.0.11
Phorum ≫ Phorum Version5.0.12
Phorum ≫ Phorum Version5.0.13
Phorum ≫ Phorum Version5.0.13a
Phorum ≫ Phorum Version5.0.14
Phorum ≫ Phorum Version5.0.14a
Phorum ≫ Phorum Version5.0.15
Phorum ≫ Phorum Version5.0.15a
Phorum ≫ Phorum Version5.0.16
Phorum ≫ Phorum Version5.0.17
Phorum ≫ Phorum Version5.0.17a
Phorum ≫ Phorum Version5.0.18
Phorum ≫ Phorum Version5.0.19
Phorum ≫ Phorum Version5.0.20
Phorum ≫ Phorum Version5.1.13
Phorum ≫ Phorum Version5.1.14
Phorum ≫ Phorum Version5.1.17
Phorum ≫ Phorum Version5.1.18
Phorum ≫ Phorum Version5.1.20
Phorum ≫ Phorum Version5.1.21
Phorum ≫ Phorum Version5.1.25
Phorum ≫ Phorum Version5.2
Phorum ≫ Phorum Version5.2.1
Phorum ≫ Phorum Version5.2.2 Updatebeta
Phorum ≫ Phorum Version5.2.3 Updaterc1
Phorum ≫ Phorum Version5.2.4 Updaterc2
Phorum ≫ Phorum Version5.2.5
Phorum ≫ Phorum Version5.2.8
Phorum ≫ Phorum Version5.2.9
Phorum ≫ Phorum Version5.2.10
Phorum ≫ Phorum Version5.2.10 Updaterc1
Phorum ≫ Phorum Version5.2.11
Phorum ≫ Phorum Version5.2.12
Phorum ≫ Phorum Version5.2.12a
Phorum ≫ Phorum Version5.2.13
Phorum ≫ Phorum Version5.2.14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.433
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://jvn.jp/en/jp/JVN71435255/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068
http://www.phorum.org/phorum5/read.php?64%2C147504