Vulnerability Database

309,776

Total vulnerabilities in the database

CVE-2011-0910

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.

  • Published: Feb 8, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-0910
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
vanillaforums / vanilla 2.0.16 2.0.16.x
vanillaforums / vanilla 2.0.9 2.0.9.x
vanillaforums / vanilla 2.0.10 2.0.10.x
vanillaforums / vanilla 2.0.11 2.0.11.x
vanillaforums / vanilla 2.0.12 2.0.12.x
vanillaforums / vanilla 2.0.13 2.0.13.x
vanillaforums / vanilla 2.0.14 2.0.14.x
vanillaforums / vanilla 2.0.15 2.0.15.x
vanillaforums / vanilla 2.0.17 2.0.17.x
vanillaforums / vanilla 2.0.17.1 2.0.17.1.x
vanillaforums / vanilla 2.0.17.2 2.0.17.2.x
vanillaforums / vanilla 2.0.17.3 2.0.17.3.x
vanillaforums / vanilla 2.0.17.4 2.0.17.4.x
vanillaforums / vanilla - 2.0.17.5.x