CVE:CVE-2012-6721
CNNVD:CNNVD-202002-480
SocialEngine 4.2.4之前版本中存在跨站请求伪造漏洞。远程攻击者可通过发送格式错误的HTTP请求利用该漏洞执行恶意操作。
solution:Upgrade socialengine socialengine to a higher version than 4.2.4,and avoid the version (,4.2.4)