Lucene search

[email protected]CVE-2010-1542

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-1542

2022-10-0316:20:58

CWE-352

[email protected]

web.nvd.nist.gov

cve

2010

1542

csrf

dfd cart

admin

configure.php

xss

remote attackers

authentication

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

Affected configurations

NVD

Node

dragonfrugaldfd_cartRange≤1.198

dragonfrugaldfd_cartMatch1.1.4

dragonfrugaldfd_cartMatch1.1.5

dragonfrugaldfd_cartMatch1.1.6

dragonfrugaldfd_cartMatch1.1.7

dragonfrugaldfd_cartMatch1.1.8

dragonfrugaldfd_cartMatch1.192

dragonfrugaldfd_cartMatch1.193

dragonfrugaldfd_cartMatch1.194

dragonfrugaldfd_cartMatch1.195

dragonfrugaldfd_cartMatch1.196

dragonfrugaldfd_cartMatch1.197

CPENameOperatorVersion
dragonfrugal:dfd_cartdragonfrugal dfd cartle1.198
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.1.4
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.1.5
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.1.6
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.1.7
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.1.8
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.192
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.193
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.194
dragonfrugal:dfd_cartdragonfrugal dfd carteq1.195

CPE	Name	Operator	Version
dragonfrugal:dfd_cart	dragonfrugal dfd cart	le	1.198
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.1.4
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.1.5
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.1.6
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.1.7
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.1.8
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.192
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.193
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.194
dragonfrugal:dfd_cart	dragonfrugal dfd cart	eq	1.195

Rows per page:

1-10 of 121

References

holisticinfosec.org/content/view/135/45/

osvdb.org/62673

secunia.com/advisories/38635

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Related for CVE-2010-1542

nvd1 prion1 cvelist1