Back to CVE Browser

CVE-2016-1174

HIGH

8.8

CVSS Severity Score

EPSS Score0.1620%

EPSS Percentile24.56th

PublishedApr 6, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.

Affected Platforms (CPE)

📦

Hiniarata

Casebook Plugin

<= 0.9.2

References & Advisories

🔗 http://jvn.jp/en/jp/JVN26627848/index.html

🔗 http://jvndb.jvn.jp/jvndb/JVNDB-2016-000043

🔗 https://hiniarata.jp/news/archives/55

🔗 http://jvn.jp/en/jp/JVN26627848/index.html

🔗 http://jvndb.jvn.jp/jvndb/JVNDB-2016-000043

🔗 https://hiniarata.jp/news/archives/55

Related Vulnerabilities

CVE-2016-11708.8

Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack...

CVE-2016-11696.1

Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitr...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...