CVEvulnerability

CVE-2008-5400

6.8 MEDIUM Published 2008-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.

Affected configurations

• mvnforum mvnforum (<= 1.2) • mvnforum mvnforum 1.0.0 • mvnforum mvnforum 1.0.0 beta1 • mvnforum mvnforum 1.0.0 beta2 • mvnforum mvnforum 1.0.0 beta3 • mvnforum mvnforum 1.0.0 rc1 • mvnforum mvnforum 1.0.0 rc2 • mvnforum mvnforum 1.0.0 rc3 01 • mvnforum mvnforum 1.0.0 rc4 • mvnforum mvnforum 1.0.0 rc4 04 • mvnforum mvnforum 1.0.2. • mvnforum mvnforum 1.0 ga • mvnforum mvnforum 1.0 rc4 • mvnforum mvnforum 1.1

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References