Lucene search

K
cve[email protected]CVE-2011-5195
HistorySep 23, 2012 - 5:55 p.m.

CVE-2011-5195

2012-09-2317:55:01
CWE-352
web.nvd.nist.gov
20
cve
2011
5195
csrf vulnerability
public knowledge project
open conference systems
security
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file.

Affected configurations

NVD
Node
public_knowledge_projectopen_conference_systemsRange2.3.4
OR
public_knowledge_projectopen_conference_systemsMatch1.0
OR
public_knowledge_projectopen_conference_systemsMatch1.1
OR
public_knowledge_projectopen_conference_systemsMatch1.1.1
OR
public_knowledge_projectopen_conference_systemsMatch1.1.2
OR
public_knowledge_projectopen_conference_systemsMatch1.1.3
OR
public_knowledge_projectopen_conference_systemsMatch1.1.4
OR
public_knowledge_projectopen_conference_systemsMatch1.1.5
OR
public_knowledge_projectopen_conference_systemsMatch1.1.6
OR
public_knowledge_projectopen_conference_systemsMatch1.1.7
OR
public_knowledge_projectopen_conference_systemsMatch2.0
OR
public_knowledge_projectopen_conference_systemsMatch2.1
OR
public_knowledge_projectopen_conference_systemsMatch2.1.0-1
OR
public_knowledge_projectopen_conference_systemsMatch2.1.1
OR
public_knowledge_projectopen_conference_systemsMatch2.1.1-1
OR
public_knowledge_projectopen_conference_systemsMatch2.1.1.-2
OR
public_knowledge_projectopen_conference_systemsMatch2.1.2
OR
public_knowledge_projectopen_conference_systemsMatch2.1.2-1
OR
public_knowledge_projectopen_conference_systemsMatch2.3
OR
public_knowledge_projectopen_conference_systemsMatch2.3.1
OR
public_knowledge_projectopen_conference_systemsMatch2.3.2
OR
public_knowledge_projectopen_conference_systemsMatch2.3.3
OR
public_knowledge_projectopen_conference_systemsMatch2.3.3-1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

Related for CVE-2011-5195