CVE-2009-4349

EUVD-2009-4317
Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
phpwebscriptslink_up_gold
5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/61017
http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt
http://secunia.com/advisories/37712
http://www.exploit-db.com/exploits/10436
http://www.vupen.com/english/advisories/2009/3532
https://exchange.xforce.ibmcloud.com/vulnerabilities/54759
http://osvdb.org/61017
http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt
http://secunia.com/advisories/37712
http://www.exploit-db.com/exploits/10436
http://www.vupen.com/english/advisories/2009/3532
https://exchange.xforce.ibmcloud.com/vulnerabilities/54759