CVE-2011-5315

Name of the Vulnerable Software and Affected Versions whCMS version 0.115 alpha

Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials via a user save action.

Recommendations For whCMS version 0.115 alpha, consider disabling the user save action in admin/index.php until a patch is available to prevent exploitation. Restrict access to the admin/index.php module to minimize the risk of hijacking administrator authentication.