Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2011-11-03T17:00:00Z
Updated: 2024-09-17T00:50:31.010Z
Reserved: 2011-10-05T00:00:00Z
Link: CVE-2011-3994
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-11-03T17:55:01.827
Modified: 2024-11-21T01:31:40.630
Link: CVE-2011-3994
Redhat
No data.