CVE-2010-1542

2022-10-0316:20:58

mitre

www.cve.org

cve-2010-1542

cross-site request forgery

remote attackers

authentication hijacking

cross-site scripting

unspecified settings

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.