medium6.8Public exploit code
CVE-2009-4826
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)2009-12-14 · webapps · php
Impact
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of administrators for requests that alter administrative settings via a cp action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scriptsez | Mini Hosting Panel | All versions |