EDB-34100

functional

Omeka 2.2 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor LiquidWormpublished 2014-07-17catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-5100US	medium6.8	2.47% (84th)	Exploit	2014-07-25
Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a n…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.