CVE-2009-3580

Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for…

published December 23, 2009

CVSS
—
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, new_password, and confirm_password parameters in a preferences action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00594 · 47.7th percentile
Published
2009-12-23T18:00Z
EPSS history
Timeline
  • 23 DEC 18:00Z
    Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for…
    cvelistv5