cbcvebase.
CVE-2008-3760
published 2008-08-21

CVE-2008-3760: Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of…

PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
0.73%
49.5th percentile
Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php.

Affected

10 ranges
VendorProductVersion rangeFixed in
lussumovanilla<= 1.1.4—
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
lussumovanilla——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.