CVEvulnerability
CVE-2009-4092
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.
Affected configurations
• simplog simplog 0.9.3.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/21390 Vendor Advisory
- http://www.exploit-db.com/exploits/10180 www.exploit-db.com
- http://www.securityfocus.com/bid/37063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54354 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21390 Vendor Advisory
- http://www.exploit-db.com/exploits/10180 www.exploit-db.com
- http://www.securityfocus.com/bid/37063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54354 exchange.xforce.ibmcloud.com