VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 3, 2011· Updated Apr 29, 2026

CVE-2011-3994

CVE-2011-3994

Description

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.

Affected products

17
  • Skyarc/Mtcms13 versions
    cpe:2.3:a:skyarc:mtcms:5.21:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:skyarc:mtcms:5.21:*:*:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.22:*:*:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.23:*:*:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.24:*:*:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.24:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.24:*:smart:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.25:*:*:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.25:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.25:*:smart:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.251:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:5.251:*:smart:*:*:*:*:*
    • cpe:2.3:a:skyarc:mtcms:*:*:*:*:*:*:*:*range: <=5.251
    • cpe:2.3:a:skyarc:mtcms:5.2:*:*:*:*:*:*:*
  • Skyarc/Multifileuploader
    cpe:2.3:a:skyarc:multifileuploader:*:*:*:*:*:*:*:*
    Range: <=0.44
  • Skyarc/Autotagging
    cpe:2.3:a:skyarc:autotagging:*:*:*:*:*:*:*:*
    Range: <=0.08
  • Skyarc/Duplicateentry
    cpe:2.3:a:skyarc:duplicateentry:*:*:*:*:*:*:*:*
    Range: <=1.2
  • Skyarc/Mailpack
    cpe:2.3:a:skyarc:mailpack:*:*:*:*:*:*:*:*
    Range: <=1.741

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.