Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2009/12/01 2:0 a.m.18 views

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

7.3AI score0.00649EPSS
SaveExploits1References5
CVE
CVE
added 2009/12/01 2:0 a.m.53 views

CVE-2009-4121

CVE-2009-4121 refers to multiple CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 . The flaws allow remote attackers to hijack an administrator’s authenticated session to perform actions such as (1) deleting web pages via a p-delete action to admin.php, and possibly (2) deleting produ...

6.8CVSS7.3AI score0.00649EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder