Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=111834146710329&w=2 | Mailing List |
| http://www.gulftech.org/?node=research&article_id=00079-06092005 | Broken Link Exploit Patch Vendor Advisory |
| http://marc.info/?l=bugtraq&m=111834146710329&w=2 | Mailing List |
| http://www.gulftech.org/?node=research&article_id=00079-06092005 | Broken Link Exploit Patch Vendor Advisory |
Configurations
History
20 Nov 2024, 23:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=111834146710329&w=2 - Mailing List | |
| References | () http://www.gulftech.org/?node=research&article_id=00079-06092005 - Broken Link, Exploit, Patch, Vendor Advisory |
08 Feb 2024, 20:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=111834146710329&w=2 - Mailing List | |
| References | (MISC) http://www.gulftech.org/?node=research&article_id=00079-06092005 - Broken Link, Exploit, Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:* |
cpe:2.3:a:invisioncommunity:gallery:*:*:*:*:*:*:*:* |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 4.3 |
| CWE | CWE-352 | |
| First Time |
Invisioncommunity
Invisioncommunity gallery |
Information
Published : 2005-06-09 04:00
Updated : 2024-11-20 23:58
NVD link : CVE-2005-1947
Mitre link : CVE-2005-1947
CVE.ORG link : CVE-2005-1947
JSON object : View
Products Affected
invisioncommunity
- gallery
CWE
CWE-352
Cross-Site Request Forgery (CSRF)