CVE-2011-5195: CSRF
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5195?
CVE-2011-5195 is classified as a high severity Cross-site request forgery (CSRF) vulnerability.
How do I fix CVE-2011-5195?
To fix CVE-2011-5195, update your Public Knowledge Project Open Conference Systems to a version later than 2.3.4.
What versions are affected by CVE-2011-5195?
CVE-2011-5195 affects Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier.
What type of attack does CVE-2011-5195 facilitate?
CVE-2011-5195 facilitates a Cross-site request forgery (CSRF) attack which can hijack administrator authentication.
Can CVE-2011-5195 allow remote attackers to upload malicious files?
Yes, CVE-2011-5195 allows remote attackers to upload PHP files by exploiting the CSRF vulnerability.