NVD

Id
36162  
Name
CVE-2014-9459  
Description
Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-02  
Modified Date
2015-01-13  
Seq
2014-9459  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184800 36162 CVE-2014-9459 http://packetstormsecurity.com/files/129751/e107-2.0-Alpha2-Cross-Site-Request-Forgery.html  View
184801 36162 CVE-2014-9459 20141229 CSRF vulnerability in CMS e107 v.2 alpha2  View
184802 36162 CVE-2014-9459 http://sroesemann.blogspot.de/2014/12/sroeadv-2014-04.html  View
184803 36162 CVE-2014-9459 https://github.com/e107inc/e107/commit/9249f892b1e635979db2a830393694fb73531080  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18600 JVNDB-2014-007475 e107 の e107_admin/users.php の AdminObserver 関数におけるクロスサイトリクエストフォージェリの脆弱性 e107 の e107_admin/users.php の AdminObserver 関数には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-9459 76752 CVE-2014-9459 36162 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007475.html 2014-12-28 2015-01-08 View