Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://www.fusionnews.net/forums/viewtopic.php?f=1&t=480 | |
http://secunia.com/advisories/27918 | third party advisory vendor advisory |
http://osvdb.org/40861 | vdb entry |