SECUNIA ADVISORY ID:
Customer Area (Credentials Required)
A vulnerability has been reported in the JPodium component for
Joomla!, which can be exploited by malicious people to conduct
cross-site request forgery attacks.
The application allows users to perform certain actions via HTTP
requests without performing any validity checks to verify the
requests. This can be exploited to e.g. delete races or delete
athletes by tricking a logged in administrative user into visiting a
malicious web site.
The vulnerability is reported in versions prior to 0.9.016.
Update to version 0.9.016.
PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.