CVE:CVE-2006-2495
CNNVD:CNNVD-200605-379
Serendipity 1.0-beta3之前版本的Entry Manager 存在跨站请求伪造(CSRF) 漏洞。 远程攻击者可以借助链接或IMG标签，以登录用户身份执行未授权操作。
solution:Upgrade s9y serendipity to a higher version than 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl3,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.9,0.9.1,1.0_beta1,1.0_beta2,and avoid the version 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl3,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.9,0.9.1,1.0_beta1,1.0_beta2