medium6.8Public exploit code
CVE-2009-4906
Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acc PHP eMail 1.1 - Cross-Site Request Forgery2009-12-13 · webapps · php
Impact
Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accscripts | Acc Php Email | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0912-exploits/ape-xsrf.txt
- http://secunia.com/advisories/37666
- http://www.exploit-db.com/exploits/10412
- http://www.vupen.com/english/advisories/2009/3508
- http://packetstormsecurity.org/0912-exploits/ape-xsrf.txt
- http://secunia.com/advisories/37666
- http://www.exploit-db.com/exploits/10412
- http://www.vupen.com/english/advisories/2009/3508