CVE-2011-0748: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
Affected Software
Event History
Frequently Asked Questions
What types of attacks can exploit CVE-2011-0748?
CVE-2011-0748 can be exploited through cross-site request forgery (CSRF) attacks to hijack administrator authentication.
How can I mitigate the risks associated with CVE-2011-0748?
To mitigate risks associated with CVE-2011-0748, upgrade to phpList version 2.10.13 or later, which includes necessary security patches.
What specific versions of phpList are affected by CVE-2011-0748?
CVE-2011-0748 affects all phpList versions prior to 2.10.13, including versions 1.0 through 2.10.12.
What is the impact of CVE-2011-0748 on phpList administrators?
The impact of CVE-2011-0748 allows remote attackers to perform unauthorized actions as if they were the administrator, compromising account integrity.
What should users of phpList do if they can't update to the latest version due to compatibility issues?
Users unable to update phpList due to compatibility issues should implement additional security measures, such as using CSRF tokens and ensuring proper session management.