CVEvulnerability
CVE-2009-4407
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors.
Affected configurations
• pyforum pyforum (<= 1.0.3)
• pyforum pyforum 1.0.0
• pyforum pyforum 1.0.1
• pyforum pyforum 1.0.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/37764 Vendor Advisory
- http://www.osvdb.org/61050 www.osvdb.org
- http://www.securityfocus.com/archive/1/508478/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54853 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/37764 Vendor Advisory
- http://www.osvdb.org/61050 www.osvdb.org
- http://www.securityfocus.com/archive/1/508478/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54853 exchange.xforce.ibmcloud.com