CVE-2012-6433

Cross-site request forgery CSRF vulnerability in e107admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of administrators for requests that conduct XSS attacks via the newstitle parameter in a create action...

CVE-2012-6433

CVE-2012-6433 affects e107 1.0.1, specifically the /e107_admin/newspost.php?create action. The vulnerability is a Cross-Site Request Forgery (CSRF) that can allow an attacker to hijack an administrator’s session and trigger actions that lead to arbitrary JavaScript execution (XSS via the news_tit...

e107 1.0.1 Administrator Cross Site Request Forgery

Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution Google Dork: intext:"This site is powered by e107" Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...