PT-2012-2172

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

CVE-2011-5195: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

PT-2012-2173

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Journal Systems versions 2.3.6 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that upload PHP files,...

PT-2012-2174

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Harvester Systems versions 2.3.1 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

CVE-2011-5197: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...