CVE:CVE-2008-6331
CNNVD:CNNVD-200902-648
Streber是一个用PHP5便携的免费的维基驱动的项目管理工具。
在PHP5写的Streber 0.08093之前的版本中存在多个跨站请求伪造漏洞。远程攻击者可以借助未知向量，劫持未明受害用户的权限。
solution:Upgrade streber-pm streber to a higher version than 0.0803,0.08,0.054,0.055,0.056,0.078,0.079,0.0791,0.0792,0.0794,0.0795,0.0796,0.0801,0.07991,and avoid the version (,0.0803],0.08,0.054,0.055,0.056,0.078,0.079,0.0791,0.0792,0.0794,0.0795,0.0796,0.0801,0.07991