Lucene search
+L

3 matches found

NVD
NVD
added 2009/04/07 2:17 p.m.27 views

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

6.8CVSS7.1AI score0.00629EPSS
SaveExploits1References4
CVE
CVE
added 2009/04/07 10:0 a.m.94 views

CVE-2008-6639

CVE-2008-6639 affects AjaXplorer 2.3.3 and 2.3.4. A CSRF flaw in admin.php allows remote attackers to hijack administrator sessions and issue password-change requests via the update_user_pwd action. The description does not provide exploit details or verification steps, and there is no remediatio...

6.8CVSS7.4AI score0.00629EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2009/04/07 10:0 a.m.29 views

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

7.1AI score0.00629EPSS
SaveExploits1References4
Rows per page
Query Builder