| |
Vulnerability CVE-2009-4907
Published: 2010-06-25 Modified: 2012-02-13
| Description: |
Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog. |
See advisories in our WLB2 database: | Topic | Author | Date |
Low |
| null | 29.06.2010 |
Type:
CWE-352 (Cross-Site Request Forgery (CSRF))
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.8/10 |
6.4/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
http://xforce.iss.net/xforce/xfdb/54714
http://secunia.com/advisories/37661
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
http://osvdb.org/60907
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
