CVE-2011-5196: CSRF
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5196?
CVE-2011-5196 is classified as a medium severity vulnerability due to its potential for allowing unauthorized file uploads.
How do I fix CVE-2011-5196?
To fix CVE-2011-5196, upgrade to Open Journal Systems version 2.3.7 or later to address the CSRF vulnerability.
What is the impact of exploiting CVE-2011-5196?
Exploiting CVE-2011-5196 can allow attackers to upload malicious PHP files, potentially leading to full administrative access or server compromise.
Which versions of Open Journal Systems are affected by CVE-2011-5196?
CVE-2011-5196 affects Open Journal Systems versions 2.3.6 and earlier, including all versions from 1.0 to 2.3.6.
What type of vulnerability is CVE-2011-5196?
CVE-2011-5196 is a Cross-site Request Forgery (CSRF) vulnerability that allows attackers to hijack the authentication of administrators.