CVE-2012-1414 Information

Description

Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action.

Reference

http://www.exploit-db.com/exploits/18502 https://exchange.xforce.ibmcloud.com/vulnerabilities/73317