[20110305] - Core - CSRF Vulnerability

• Project: Joomla!
• SubProject: All
• Severity: Moderate
• Versions: 1.6.0
• Exploit type: CSRF Vulnerability
• Reported Date: 2011-February-28
• Fixed Date: 2011-March-07

Description

Inadequate token checking causes cross site request forgery vulnerability.

Affected Installs

Joomla! version 1.6.0.

Solution

Upgrade to the latest Joomla! version (1.6.1 or later)

Reported by Marius Van Rijnsoever

Contact

The JSST at the Joomla! Security Center.