CVE-2008-0266

Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly…

published January 15, 2008

CVSS
—
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.0th percentile
Published
2008-01-15T19:00Z
EPSS history
Timeline
  • 15 JAN 19:00Z
    Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly…
    cvelistv5