← Database

CVE-2006-2495

HIGH CVSS: 7.5 Published: 2006-05-20 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

Affected Platforms

S9Y Serendipity

Weakness Type

NVD-CWE-Other

References