CVE-2011-0748

Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.47% chance of exploitation in the next 30 days, 73rd percentile

Published

2011-04-13

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18419

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18419

Security advisories

• http://secunia.com/advisories/44041
• http://www.securityfocus.com/bid/51681

References

• CVE Record
• NVD entry