NVD

Id
5173  
Name
CVE-2008-5400  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2009-05-14  
Seq
2008-5400  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
32555 5173 CVE-2008-5400 20081203 [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM  View
32556 5173 CVE-2008-5400 http://security.bkis.vn/?p=286  View
32557 5173 CVE-2008-5400 4699  View
32558 5173 CVE-2008-5400 http://www.mvnforum.com/mvnforum/viewthread_thread,4361  View
32559 5173 CVE-2008-5400 20081203 [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM  View
32560 5173 CVE-2008-5400 mvnforum-unspecified-csrf(47027)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49827 JVNDB-2008-005137 mvnForum におけるクロスサイトリクエストフォージェリの脆弱性 mvnForum は、HTTP Referer ヘッダに関する処理に不備があるため、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-5400 35513 CVE-2008-5400 5173 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005137.html 2008-12-02 2012-09-25 View