CVE

Id
42007  
CVE No.
CVE-2009-4572  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default URI.  
Phase
Assigned (20100105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460286 42007 CVE-2009-4572 BUGTRAQ:20091206 PhpShop Multiple Vulnerabilities  View
460287 42007 CVE-2009-4572 URL:http://www.securityfocus.com/archive/1/archive/1/508270/100/0/threaded  View
460288 42007 CVE-2009-4572 MISC:http://www.andreafabrizi.it/?exploits:phpshop  View
460289 42007 CVE-2009-4572 SECUNIA:31948  View
460290 42007 CVE-2009-4572 URL:http://secunia.com/advisories/31948  View
460291 42007 CVE-2009-4572 XF:phpshop-productid-csrf(54587)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37854 JVNDB-2010-003639 Joomla! の beeheard コンポーネントにおける SQL インジェクションの脆弱性 Joomla! の BeeHeard (com_beeheard) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2009-4576 42007 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003639.html  View