PT-2012-2172

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

CVE-2011-5195: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...