Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vanilla people.php 跨站伪造请求漏洞
Vulnerability Description
Vanilla是一个开源的多语言、可扩展的论坛程序。 Vanilla 1.1.4及其之前版本存在跨站伪造请求攻击漏洞。远程攻击者可以通过people.php的SignOutNow操作,执行认证任意用户的退出操作。
CVSS Information
N/A
Vulnerability Type
N/A