Vulnerability CVE-2008-7243
Published: 2009-09-17   Modified: 2012-02-12

Description:
Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities
DSecRG
19.09.2009

Type:

CWE-352

 (Cross-Site Request Forgery (CSRF))

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Modxcms -> Modxcms 

 References:
http://www.securityfocus.com/archive/1/487696/100/200/threaded
http://www.securityfocus.com/bid/27672
https://exchange.xforce.ibmcloud.com/vulnerabilities/40378
Copyright 2024, cxsecurity.com

 

Back to Top