CVE-2008-4448

EUVD-2008-4429
Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) futils, or (3) edit actions.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
positive_softwareh-sphere
4.3.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt
http://secunia.com/advisories/32086
https://exchange.xforce.ibmcloud.com/vulnerabilities/45614
http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt
http://secunia.com/advisories/32086
https://exchange.xforce.ibmcloud.com/vulnerabilities/45614