Cross-Site Request Forgery in b2evolution Affects Admin Authentication
CVE-2013-7352
Currently unrated
What is CVE-2013-7352?
A Cross-Site Request Forgery (CSRF) vulnerability is present in the b2evolution application prior to version 4.1.7. This weakness allows remote attackers to execute unauthorized actions on behalf of an authenticated administrator. By manipulating requests through the 'show_statuses[]' parameter, attackers can trigger SQL injection attacks, effectively hijacking administrative sessions and potentially compromising sensitive data. It is crucial for users of affected versions to apply the latest updates to safeguard their applications.