CVE

Id
41998  
CVE No.
CVE-2009-4563  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460197 41998 CVE-2009-4563 MILW0RM:9166  View
460198 41998 CVE-2009-4563 URL:http://www.milw0rm.com/exploits/9166  View
460199 41998 CVE-2009-4563 OSVDB:55921  View
460200 41998 CVE-2009-4563 URL:http://osvdb.org/55921  View
460201 41998 CVE-2009-4563 SECUNIA:35863  View
460202 41998 CVE-2009-4563 URL:http://secunia.com/advisories/35863  View
460203 41998 CVE-2009-4563 XF:zenphoto-adminoptions-csrf(51782)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39266 JVNDB-2010-005051 Viscacha の editprofile.php におけるクロスサイトスクリプティングの脆弱性 Viscacha の editprofile.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4567 41998 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005051.html  View