CVE:CVE-2012-1498
CNNVD:CNNVD-201202-525
Webfolio CMS中存在跨站请求伪造漏洞。远程攻击者可利用此漏洞添加管理员账户，或修改现有的和发布的网页。Webfolio CMS 1.1.4及之前版本中存在该漏洞，其它版本也可能受到影响。
solution:Upgrade nikola_posa webfoliocms1.0.2 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.3 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.4 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.5 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.6 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.7 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.8 to a higher version than *; Upgrade nikola_posa webfoliocms1.0.9 to a higher version than *; Upgrade nikola_posa webfoliocms1.1.0 to a higher version than *; Upgrade nikola_posa webfoliocms1.1.1 to a higher version than *; Upgrade nikola_posa webfoliocms1.1.2 to a higher version than *; Upgrade nikola_posa webfoliocms1.1.3 to a higher version than *; Upgrade nikola_posa webfoliocms1.1.4 to a higher version than *