CVE-2011-1954

Published: Jun 6, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.

Affected (13)

Products: Postrev: Post Revolution

Postrev

1 product

Post Revolution

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Postrev Post Revolution	Up to 0.8.0c-2
Postrev Post Revolution	Version 0.6.2 beta
Postrev Post Revolution	Version 0.6.3 beta
Postrev Post Revolution	Version 0.6.4
Postrev Post Revolution	Version 0.6.5
Postrev Post Revolution	Version 0.6.6
Postrev Post Revolution	Version 0.7.0 rc1
Postrev Post Revolution	Version 0.7.0 rc2
Postrev Post Revolution	Version 0.7.0 rc3
Postrev Post Revolution	Version 0.7.0 rc4
Postrev Post Revolution	Version 0.8.0 alpha
Postrev Post Revolution	Version 0.8.0b
Postrev Post Revolution	Version 0.8.0c