CVE-2013-7352: SQL Injection
Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the showstatuses[] parameter, related to CVE-2013-2945.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7352?
CVE-2013-7352 is rated as a high severity vulnerability due to the potential for remote attackers to hijack administrative authentication.
How do I fix CVE-2013-7352?
To fix CVE-2013-7352, upgrade to b2evolution version 4.1.7 or later.
What type of vulnerability is CVE-2013-7352?
CVE-2013-7352 is identified as a cross-site request forgery (CSRF) vulnerability.
Which b2evolution versions are affected by CVE-2013-7352?
CVE-2013-7352 affects b2evolution versions prior to 4.1.7, including versions 4.1.0 to 4.1.6.
Can CVE-2013-7352 lead to SQL injection attacks?
Yes, CVE-2013-7352 can enable remote attackers to perform SQL injection attacks through the exploitation of the CSRF vulnerability.