CVE-2011-5315: CSRF
Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5315?
CVE-2011-5315 has a moderate severity rating due to the potential for cross-site request forgery attacks on administrator actions.
How do I fix CVE-2011-5315?
To fix CVE-2011-5315, upgrade to a version of whCMS later than 0.115-alpha that addresses this vulnerability.
What does CVE-2011-5315 allow attackers to do?
CVE-2011-5315 allows remote attackers to hijack the authentication of administrators, enabling them to modify user credentials.
Which version of whCMS is affected by CVE-2011-5315?
CVE-2011-5315 affects whCMS version 0.115-alpha.
Is there a known exploit for CVE-2011-5315?
While specific exploits for CVE-2011-5315 may not be publicly disclosed, the nature of the CSRF vulnerability allows for potential exploitation.