Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurner_FeedSmith_Plugin.php, as demonstrated by the (1) feedburner_url and (2) feedburner_comments_url parameters.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2007-10-05T23:00:00
Updated: 2017-10-04T09:57:01
Reserved: 2007-10-05T00:00:00
Link: CVE-2007-5229
JSON object: View
NVD Information
Status : Modified
Published: 2007-10-05T23:17:00.000
Modified: 2017-10-05T01:29:01.477
Link: CVE-2007-5229
JSON object: View
Redhat Information
No data.
CWE