CVE-2009-4907

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
dootzkyoblog
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/60907
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
http://secunia.com/advisories/37661
https://exchange.xforce.ibmcloud.com/vulnerabilities/54714
http://osvdb.org/60907
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
http://secunia.com/advisories/37661
https://exchange.xforce.ibmcloud.com/vulnerabilities/54714