2 matches found
UBUNTU-CVE-2009-3580
Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...
6.8CVSS5.9AI score0.00594EPSS
SaveExploits1References2
DEBIAN-CVE-2009-3580
Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...
6.8CVSS7.5AI score0.00594EPSS
SaveExploits1References1
20