Unrated severityNVD Advisory· Published Aug 21, 2008· Updated Jun 16, 2026
CVE-2008-3760
CVE-2008-3760
Description
Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php.
Affected products
11cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*range: <=1.1.4
- cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*
- Range: <=1.1.4
Patches
Vulnerability mechanics
References
7- lussumo.com/bugs/discussion/88/csrf-attack-hole/nvdExploit
- lussumo.com/community/discussion/8463/possible-security-flaw/nvdExploit
- secunia.com/advisories/31527nvdVendor Advisory
- lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/nvd
- lussumo.com/docs/doku.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44558nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44748nvd
News mentions
0No linked articles in our index yet.