medium6.0
CVE-2009-0408
Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.
Impact
Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Oscommerce | Version 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://holisticinfosec.org/content/view/97/45/
- http://osvdb.org/51605
- http://secunia.com/advisories/33446
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48289
- http://holisticinfosec.org/content/view/97/45/
- http://osvdb.org/51605
- http://secunia.com/advisories/33446
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48289