CVE-2011-5318

CVE-2011-5318 affects diafan.CMS prior to 5.1, with multiple CSRF flaws that could hijack administrator sessions for POSTs to admin/news/saveNEWS_ID/, admin/site/save2/, or admin/usersite/save2/. The connected Red Hat and NVD entries confirm the same description. Root cause: cross-site request fo...