CVE

Id
40457  
CVE No.
CVE-2009-3022  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.  
Phase
Assigned (20090831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444450 40457 CVE-2009-3022 CONFIRM:http://www.bingo-cms.jp/security/jvn68640473.html  View
444451 40457 CVE-2009-3022 JVN:JVN#68640473  View
444452 40457 CVE-2009-3022 URL:http://jvn.jp/en/jp/JVN68640473/index.html  View
444453 40457 CVE-2009-3022 JVNDB:JVNDB-2009-000058  View
444454 40457 CVE-2009-3022 URL:http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html  View
444455 40457 CVE-2009-3022 OSVDB:57425  View
444456 40457 CVE-2009-3022 URL:http://osvdb.org/57425  View
444457 40457 CVE-2009-3022 SECUNIA:36458  View
444458 40457 CVE-2009-3022 URL:http://secunia.com/advisories/36458  View
444459 40457 CVE-2009-3022 XF:bingocms-unspecified-csrf(52838)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41163 JVNDB-2009-002170 Pidgin の libpurple におけるセッションを盗聴される脆弱性 Pidgin の libpurple には、旧バージョンの Jabber サーバと接続した場合に "Require SSL/TLS" 設定が適切に行われないため、暗号化せずにサーバと接続し、セッションを盗聴される脆弱性が存在します。 CVE-2009-3026 40457 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002170.html  View