CVE-2011-5197: CSRF
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5197?
CVE-2011-5197 is considered a high severity vulnerability due to its potential for remote exploitation via CSRF attacks.
How do I fix CVE-2011-5197?
To fix CVE-2011-5197, upgrade to a version of Public Knowledge Project Open Harvester Systems later than 2.3.1 that includes CSRF protection mechanisms.
What systems are affected by CVE-2011-5197?
CVE-2011-5197 affects Public Knowledge Project Open Harvester Systems version 2.3.1 and earlier, including versions 1.0 and 2.0.0.
What type of vulnerability is CVE-2011-5197?
CVE-2011-5197 is a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of an authenticated user.
What can an attacker do with CVE-2011-5197?
An attacker exploiting CVE-2011-5197 can hijack the authentication of administrators to upload malicious PHP files to the server.