CVE-2009-0648

CVE-2009-0648 refers to multiple CSRF vulnerabilities in the manage_users handler of Falt4 CMS (aka Falt4 Extreme), located in admin/index.php. The underlying issue enables remote attackers to hijack administrator sessions for password-change requests via the edit and edit_now actions. Affected c...