Cross site request forgery (csrf)

2010-04-2619:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

CPENameOperatorVersion
dfd_carteq1.193
dfd_carteq1.196
dfd_carteq1.1.8
dfd_carteq1.1.6
dfd_carteq1.194
dfd_carteq1.197
dfd_carteq1.1.5
dfd_carteq1.195
dfd_cartle1.198
dfd_carteq1.192

Name	Operator	Version
dfd_cart	eq	1.193
dfd_cart	eq	1.196
dfd_cart	eq	1.1.8
dfd_cart	eq	1.1.6
dfd_cart	eq	1.194
dfd_cart	eq	1.197
dfd_cart	eq	1.1.5
dfd_cart	eq	1.195
dfd_cart	le	1.198
dfd_cart	eq	1.192