CVE-2009-4092

high

Description

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/54354

http://www.exploit-db.com/exploits/10180

http://secunia.com/advisories/21390

Details

Source: Mitre, NVD

Published: 2009-11-29

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00317

Detections

Analytics