Lucene search
HistoryApr 20, 2010 - 2:30 p.m.
CVE-2009-4773
csrf
vulnerability
ubercart
drupal
authentication
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.6%
Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
Node
ubercartubercartMatch5.x-1.0
ORubercartubercartMatch5.x-1.0alpha1
ORubercartubercartMatch5.x-1.0alpha2
ORubercartubercartMatch5.x-1.0alpha3
ORubercartubercartMatch5.x-1.0alpha4
ORubercartubercartMatch5.x-1.0alpha5
ORubercartubercartMatch5.x-1.0alpha6
ORubercartubercartMatch5.x-1.0alpha6b
ORubercartubercartMatch5.x-1.0alpha6c
ORubercartubercartMatch5.x-1.0alpha7
ORubercartubercartMatch5.x-1.0alpha7b
ORubercartubercartMatch5.x-1.0alpha7c
ORubercartubercartMatch5.x-1.0alpha7d
ORubercartubercartMatch5.x-1.0alpha7e
ORubercartubercartMatch5.x-1.0alpha8
ORubercartubercartMatch5.x-1.0beta1
ORubercartubercartMatch5.x-1.0beta2
ORubercartubercartMatch5.x-1.0beta3
ORubercartubercartMatch5.x-1.0beta4
ORubercartubercartMatch5.x-1.0beta5
ORubercartubercartMatch5.x-1.0beta6
ORubercartubercartMatch5.x-1.0beta7
ORubercartubercartMatch5.x-1.0rc1
ORubercartubercartMatch5.x-1.0rc2
ORubercartubercartMatch5.x-1.0rc3
ORubercartubercartMatch5.x-1.0rc4
ORubercartubercartMatch5.x-1.0rc5
ORubercartubercartMatch5.x-1.1
ORubercartubercartMatch5.x-1.2
ORubercartubercartMatch5.x-1.3
ORubercartubercartMatch5.x-1.3rc1
ORubercartubercartMatch5.x-1.4
ORubercartubercartMatch5.x-1.5
ORubercartubercartMatch5.x-1.6
ORubercartubercartMatch5.x-1.7
ORubercartubercartMatch5.x-1.8
ORubercartubercartMatch6.x-2.0
ORubercartubercartMatch6.x-2.0beta1
ORubercartubercartMatch6.x-2.0beta2
ORubercartubercartMatch6.x-2.0beta3
ORubercartubercartMatch6.x-2.0beta4
ORubercartubercartMatch6.x-2.0beta5
ORubercartubercartMatch6.x-2.0beta6
ORubercartubercartMatch6.x-2.0dev
ORubercartubercartMatch6.x-2.0rc1
ORubercartubercartMatch6.x-2.0rc2
ORubercartubercartMatch6.x-2.0rc3
ORubercartubercartMatch6.x-2.0rc4
ORubercartubercartMatch6.x-2.0rc5
ORubercartubercartMatch6.x-2.0rc6
ORubercartubercartMatch6.x-2.0rc7
drupaldrupal
Related
nvd
nvd
CVE-2009-4773
2010-04-20 14:30:01
prion
prion
Cross site request forgery (csrf)
2010-04-20 14:30:00
cvelist
cvelist
CVE-2009-4773
2010-04-20 14:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.6%
Related for CVE-2009-4773