Lucene search
HistorySep 14, 2009 - 2:30 p.m.
CVE-2008-7221
cve
2008
7221
csrf
vulnerability
runcms
1.6.1
remote attackers
hijack
authentication
administrators
add new administrators
modify user profiles
crafted request
system
admin.php
7.2 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
39.1%
Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.
Affected configurations
Node
runcmsruncmsMatch1.6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| runcms:runcms | runcms | eq | 1.6.1 |
Related
prion
prion
Cross site request forgery (csrf)
2009-09-14 14:30:00
cvelist
cvelist
CVE-2008-7221
2009-09-14 14:00:00
nvd
nvd
CVE-2008-7221
2009-09-14 14:30:00
7.2 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
39.1%
Related for CVE-2008-7221