Lucene search
+L

3 matches found

NVD
NVD
•added 2009/04/07 2:17 p.m.•33 views

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

6.8CVSS7.1AI score0.00629EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2009/04/07 10:00 a.m.•35 views

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

7.1AI score0.00629EPSS
SaveExploits1References4
CVE
CVE
•added 2009/04/07 10:00 a.m.•104 views

CVE-2008-6639

CVE-2008-6639 affects AjaXplorer 2.3.3 and 2.3.4. A CSRF flaw in admin.php allows remote attackers to hijack administrator sessions and issue password-change requests via the update_user_pwd action. The description does not provide exploit details or verification steps, and there is no remediatio...

6.8CVSS7.4AI score0.00629EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder