CVE-2005-1947

Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2005-06-09

Last modified

2024-08-07

Weaknesses

CWE-352

Affected products

• Gallery (Invisioncommunity)

References

• http://marc.info/?l=bugtraq&m=111834146710329&w=2
• http://www.gulftech.org/?node=research&article_id=00079-06092005