Vulnerability Details CVE-2005-3129
Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.4%
CVSS Severity
CVSS v2 Score 5.1
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html
- http://marc.info/?l=bugtraq&m=112801570631203&w=2
- http://secunia.com/advisories/17011/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22456
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html
- http://marc.info/?l=bugtraq&m=112801570631203&w=2
- http://secunia.com/advisories/17011/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22456
Products affected by CVE-2005-3129
-
cpe:2.3:a:s9y:serendipity:0.3
-
cpe:2.3:a:s9y:serendipity:0.4
-
cpe:2.3:a:s9y:serendipity:0.7
-
cpe:2.3:a:s9y:serendipity:0.7.1
-
cpe:2.3:a:s9y:serendipity:0.8
-
cpe:2.3:a:s9y:serendipity:0.8.1
-
cpe:2.3:a:s9y:serendipity:0.8.2
-
cpe:2.3:a:s9y:serendipity:0.8.3
-
cpe:2.3:a:s9y:serendipity:0.8.4