Unscored severity · published Sep 23, 2012
CVE-2011-5196
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OJ
Open Journal Systems · Public Knowledge Project
through 2.3.6; 1.0; 1.0.1; 1.1; 1.1.5; 1.1.6; +24 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5196
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5196
Exploit
http://osvdb.org/77995
Exploit
http://secunia.com/advisories/47330
Exploit
http://www.exploit-db.com/exploits/18266
More from Open Journal Systems
6.1
CVE-2024-7902
A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic
6.1
CVE-2024-25438
A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into…
6.1
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers
6.1
CVE-2022-24181
Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header