Lucene search

MitreCVE-2009-0112

HistoryJan 09, 2009 - 6:30 p.m.

CVE-2009-0112

2009-01-0918:30:03

CWE-352

mitre

web.nvd.nist.gov

cve-2009-0112

csrf

admin/agent_edit.asp

pollpro 3.0

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

70.0%

JSON

Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters.

Affected configurations

Nvd

Node

expinionpoll_proMatch3.0

VendorProductVersionCPE
expinionpoll_pro3.0cpe:2.3:a:expinion:poll_pro:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
expinion	poll_pro	3.0	cpe:2.3:a:expinion:poll_pro:3.0:::::::*

References

marc.info/?l=bugtraq&m=123117044713213&w=2

secunia.com/advisories/33319

securityreason.com/securityalert/4895

exchange.xforce.ibmcloud.com/vulnerabilities/47754

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

70.0%

JSON

Related for CVE-2009-0112