medium6.8Public exploit code
CVE-2009-0468
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery / Cross-Site Scripting2009-01-29 · remote · windows · Verified
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Armorlogic | Profense Web Application Firewall | Versions 2.6.2, 2.6.3 |