CVE-2013-4726

🗓️ 25 Apr 2014 17:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

CSRF vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a and other version

Reporter	Title	Published	Views	Family All 7
0day.today	CM3 AcoraCMS XSS / CSRF / Redirection / Disclosure Vulnerabilities	27 Aug 201300:00	–	zdt
Cvelist	CVE-2013-4726	25 Apr 201417:00	–	cvelist
EUVD	EUVD-2013-4577	7 Oct 202500:30	–	euvd
NVD	CVE-2013-4726	25 Apr 201417:12	–	nvd
OpenVAS	Acora CMS Multiple Vulnerabilities (Apr 2014) - Active Check	29 Apr 201400:00	–	openvas
Packet Storm	CM3 AcoraCMS XSS / CSRF / Redirection / Disclosure	26 Aug 201300:00	–	packetstorm
Prion	Cross site request forgery (csrf)	25 Apr 201417:12	–	prion

NVD

Node

OR

ddsn cm3_acora_content_management_systemMatch5.5.0/1b-p1

ddsn cm3_acora_content_management_systemMatch5.5.7/12b

ddsn cm3_acora_content_management_systemMatch6.0.2/1a

ddsn cm3_acora_content_management_systemMatch6.0.6/1a

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html
osvdb	www.osvdb.org/96665
digitalsec	www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt

Parameter	Position	Path	Description	CWE
username	query param	/AcoraCMS/Admin/login/default.asp	Cross-site request forgery vulnerability enabling CSRF on login-related functionality.	CWE-352
m	query param	/AcoraCMS/track.aspx	URL redirection vulnerability that may be exploited via crafted redirect parameters.	CWE-352
l	query param	/AcoraCMS/track.aspx	URL redirection vulnerability that may be exploited via crafted redirect parameters.	CWE-352
__VIEWSTATE	path	/AcoraCMS/Admin/top.aspx	Information disclosure via unauthenticated access to _VIEWSTATE data.	CWE-352

16 Jun 2026 23:57Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

EPSS0.01062

cve-2013-4726 csrf ddsn interactive cm3 acora cms remote attack