RSS   Vulnerabilities for 'Phparanoid'   RSS

2008-12-30
 
CVE-2008-5758

CWE-352
 

 
Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors related to private messages.

 
2008-12-18
 
CVE-2008-5673

CWE-264
 

 
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.

 
 
CVE-2008-5672

CWE-352
 

 
Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.

 


Copyright 2024, cxsecurity.com

 

Back to Top