Lucene search

K
cvelistMitreCVELIST:CVE-2013-7352
HistoryApr 02, 2014 - 6:00 p.m.

CVE-2013-7352

2014-04-0218:00:00
mitre
www.cve.org
4
cross-site request forgery
b2evolution
admin authentication hijack

AI Score

7.8

Confidence

Low

EPSS

0.002

Percentile

58.5%

Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the show_statuses[] parameter, related to CVE-2013-2945.

AI Score

7.8

Confidence

Low

EPSS

0.002

Percentile

58.5%