CVE-2007-5818

sBlog 0.7.3 Beta - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators.

References (5)

[Various Sources] http://0x90.com.ar/Advisory/20071031.txt

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/483108/100/0/threaded

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38216

[Third Party Advisory] http://secunia.com/advisories/27485

[Third Party Advisory] http://securityreason.com/securityalert/3341

Scores

EPSS 0.0039

EPSS Percentile 59.7%

Classification

CWE

CWE-352

Status draft

Affected Products (1)

sblog/sblog

Timeline

Published Nov 05, 2007

Tracked Since Feb 18, 2026