NVD

Id
6945  
Name
CVE-2008-7214  
Description
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-09-11  
Modified Date
2009-09-16  
Seq
2008-7214  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39252 6945 CVE-2008-7214 20080227 Re: Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS  View
39253 6945 CVE-2008-7214 http://forum.mambo-foundation.org/showthread.php?t=10158  View
39254 6945 CVE-2008-7214 http://www.bugreport.ir/index_33.htm  View
39255 6945 CVE-2008-7214 20080128 Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS  View
39256 6945 CVE-2008-7214 ADV-2008-0325  View
39257 6945 CVE-2008-7214 mambo-connector-csrf(39985)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42154 JVNDB-2009-003161 Mambo で使用される MOStlyCE の administrator/index2.php におけるクロスサイトリクエストフォージェリの脆弱性 Mambo で使用される MOStlyCE の administrator/index2.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-7214 37327 CVE-2008-7214 6945 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003161.html 2009-09-11 2012-06-26 View