CVE-2008-5565

CVE-2008-5565 is a CSRF vulnerability in DL PayCart 1.34 and earlier, where an attacker can cause an admin password change by triggering a logout action with the parameters NewAdmin, NewPass1, and NewPass2 in admin/settings.php. Root cause is CSRF in the admin settings workflow; impact is partial...