Monday, August 9, 2010

Open Blog : HTB22496 - XSRF (CSRF) in Open blog vulnerability

Users of Open Blog please be advised of a HTB22496 - XSRF (CSRF) in Open blog vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
HTB22496: HTB22496 - XSRF (CSRF) in Open blog
Open Blog
Vulnerability Details:

The vulnerability exists due to failure in the "/application/modules/admin/controllers/users.php" script to properly verify the source of HTTP request.Read more at www.criticalwatch.com
 

No comments:

Post a Comment