Lucene search

[email protected]NVD:CVE-2010-1542

HistoryApr 26, 2010 - 7:30 p.m.

CVE-2010-1542

2010-04-2619:30:00

CWE-352

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

Affected configurations

NVD

Node

dragonfrugaldfd_cartRange≤1.198

dragonfrugaldfd_cartMatch1.1.4

dragonfrugaldfd_cartMatch1.1.5

dragonfrugaldfd_cartMatch1.1.6

dragonfrugaldfd_cartMatch1.1.7

dragonfrugaldfd_cartMatch1.1.8

dragonfrugaldfd_cartMatch1.192

dragonfrugaldfd_cartMatch1.193

dragonfrugaldfd_cartMatch1.194

dragonfrugaldfd_cartMatch1.195

dragonfrugaldfd_cartMatch1.196

dragonfrugaldfd_cartMatch1.197

References

holisticinfosec.org/content/view/135/45/

osvdb.org/62673

secunia.com/advisories/38635

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Related for NVD:CVE-2010-1542

cve1 prion1 cvelist1