CVE-2006-2495

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

Affected Software

Name	Vendor	Start Version	End Version
Serendipity	S9y	0.3 (including)	0.3 (including)
Serendipity	S9y	0.4 (including)	0.4 (including)
Serendipity	S9y	0.5 (including)	0.5 (including)
Serendipity	S9y	0.5_pl1 (including)	0.5_pl1 (including)
Serendipity	S9y	0.6 (including)	0.6 (including)
Serendipity	S9y	0.6_pl3 (including)	0.6_pl3 (including)
Serendipity	S9y	0.7 (including)	0.7 (including)
Serendipity	S9y	0.7.1 (including)	0.7.1 (including)
Serendipity	S9y	0.8 (including)	0.8 (including)
Serendipity	S9y	0.8.1 (including)	0.8.1 (including)
Serendipity	S9y	0.8.2 (including)	0.8.2 (including)
Serendipity	S9y	0.8.3 (including)	0.8.3 (including)
Serendipity	S9y	0.8.4 (including)	0.8.4 (including)
Serendipity	S9y	0.8.5 (including)	0.8.5 (including)
Serendipity	S9y	0.9 (including)	0.9 (including)
Serendipity	S9y	0.9.1 (including)	0.9.1 (including)
Serendipity	S9y	1.0_beta1 (including)	1.0_beta1 (including)
Serendipity	S9y	1.0_beta2 (including)	1.0_beta2 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-2495
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References