CVE

Id
36846  
CVE No.
CVE-2008-6729  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter.  
Phase
Assigned (20090420)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401280 36846 CVE-2008-6729 MILW0RM:7557  View
401281 36846 CVE-2008-6729 URL:http://www.milw0rm.com/exploits/7557  View
401282 36846 CVE-2008-6729 OSVDB:50999  View
401283 36846 CVE-2008-6729 URL:http://osvdb.org/50999  View
401284 36846 CVE-2008-6729 SECUNIA:33309  View
401285 36846 CVE-2008-6729 URL:http://secunia.com/advisories/33309  View
401286 36846 CVE-2008-6729 XF:phpmotion-password-csrf(47585)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48512 JVNDB-2008-003822 DotNetNuke のエラーハンドリングページにおけるクロスサイトスクリプティングの脆弱性 DotNetNuke のエラーハンドリングページには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6733 36846 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003822.html  View