NVD

Id
6318  
Name
CVE-2008-6587  
Description
Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-04-03  
Modified Date
2009-04-06  
Seq
2008-6587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37126 6318 CVE-2008-6587 20080418 BitTorrent Clients and CSRF  View
37127 6318 CVE-2008-6587 28848  View
37128 6318 CVE-2008-6587 torrentflux-admin-csrf(41926)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44504 JVNDB-2009-005511 Vuze の index.tmpl におけるクロスサイトリクエストフォージェリの脆弱性 Vuze (前 Azureus HTML WebUI) の index.tmpl には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-6587 36700 CVE-2008-6587 6318 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005511.html 2009-04-03 2012-12-20 View