Unscored CVE-2011-3994 EUVD-2011-3947GHSA-w3rg-mp26-54rp

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.…

Published Nov 3, 2011 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.

References

http://www.mtcms.jp/news/product/201110131921.html
JVNDB-2011-000094 third-party-advisory
JVN#56667137 third-party-advisory