Secunia Logo
 
CVE Reference: CVE-2008-0165
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-0165

Description:
Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/41904

SAID
  Secunia Advisory: SA29907
  Secunia Advisory: SA29932

DEBIAN
  http://www.debian.org/security/2008/dsa-1553

CONFIRM
  http://ikiwiki.info/security/#index31h2
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445


Return to the previous page.