CSRF in Aimluck Aipo
CVE-2011-1341
Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (44.5th percentile) — read the EPSS interpretation.
Affected products
- Aimluck Aipo — versions 4.0.1.0, 4.0.2.0
- Aimluck Aipo-asp
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch)
- vultures@jpcert.or.jp (x_refsource_JVNDB, Patch, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)