CVE-2009-4787

EUVD-2009-4750
Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have unspecified other impact.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
pliggpligg_cms
𝑥
≤ 1.0.2
pliggpligg_cms
1.0.0
pliggpligg_cms
1.0.0:rc1
pliggpligg_cms
1.0.0:rc2
pliggpligg_cms
1.0.0:rc3
pliggpligg_cms
1.0.0:rc4
pliggpligg_cms
1.0.0:rc5
pliggpligg_cms
1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://holisticinfosec.org/content/view/130/45/
http://secunia.com/advisories/37349
http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/
http://holisticinfosec.org/content/view/130/45/
http://secunia.com/advisories/37349
http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/