CSRF in 11in1

CVE-2012-0997

Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

  • 11in1 — versions 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References