CVE-2011-3994

Published: Nov 3, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.

Affected (17)

Products: Skyarc: Autotagging, Duplicateentry, Mailpack, Mtcms, Multifileuploader

5 products

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Skyarc Autotagging	Up to 0.08
Skyarc Duplicateentry	Up to 1.2
Skyarc Mailpack	Up to 1.741
Skyarc Mtcms	Up to 5.251
Skyarc Mtcms	Version 5.21
Skyarc Mtcms	Version 5.22
Skyarc Mtcms	Version 5.23
Skyarc Mtcms	Version 5.24
Skyarc Mtcms	Version 5.24
Skyarc Mtcms	Version 5.24
Skyarc Mtcms	Version 5.251
Skyarc Mtcms	Version 5.251
Skyarc Mtcms	Version 5.25
Skyarc Mtcms	Version 5.25
Skyarc Mtcms	Version 5.25
Skyarc Mtcms	Version 5.2
Skyarc Multifileuploader	Up to 0.44