CVE:CVE-2011-1954
CNNVD:CNNVD-201106-032
Post Revolution 0.8.0c-2及其早期版本中存在多个跨站请求伪造漏洞。远程攻击者可以利用该漏洞劫持任意用户向(1)ajax-weblog-guardar.php，(2)verpost.php，(3)comments.php，或者(4)perfil.php发出的请求的认证。
solution:Upgrade postrev post_revolution to a higher version than 0.8.0c-2,0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b,0.8.0c,and avoid the version (,0.8.0c-2],0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b,0.8.0c