Cross site request forgery (csrf)

2009-02-1916:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions.

CPENameOperatorVersion
falt4_extremeeq4.0.0-rc

CPE	Name	Operator	Version
	falt4_extreme	eq	4.0.0-rc

References

packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt

secunia.com/advisories/33973

exchange.xforce.ibmcloud.com/vulnerabilities/48786