Lucene search
HistoryApr 29, 2010 - 7:30 p.m.
CVE-2010-1611
cve-2010-1611
alegrocart 1.1
csrf
vulnerability
remote attackers
authentication hijacking
administrator password reset
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication of the administrator for requests that reset the administrator password via a POST to admin/ with an update action.
Affected configurations
Node
alegrocartalegrocartMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| alegrocart:alegrocart | alegrocart | eq | 1.1 |
Related
prion
prion
Cross site request forgery (csrf)
2010-04-29 19:30:00
nvd
nvd
CVE-2010-1611
2010-04-29 19:30:00
cvelist
cvelist
CVE-2010-1611
2010-04-29 19:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2010-1611