CVE-2009-0408 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:S/C:P/I:P/A:P
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 36%

Vendor	Product	Version
oscommerce	oscommerce	2.2:rc_2a

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-352 - Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References

http://holisticinfosec.org/content/view/97/45/

http://osvdb.org/51605

http://secunia.com/advisories/33446

https://exchange.xforce.ibmcloud.com/vulnerabilities/48289

http://holisticinfosec.org/content/view/97/45/

http://osvdb.org/51605

http://secunia.com/advisories/33446

https://exchange.xforce.ibmcloud.com/vulnerabilities/48289