6
CVE-2009-0408
- EPSS 0.68%
- Veröffentlicht 03.02.2009 19:30:00
- Zuletzt bearbeitet 16.06.2026 23:04:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oscommerce ≫ Oscommerce Version2.2 Updaterc_2a
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.68% | 0.474 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
http://holisticinfosec.org/content/view/97/45/
http://osvdb.org/51605
http://secunia.com/advisories/33446
https://exchange.xforce.ibmcloud.com/vulnerabilities/48289