CVE-2009-4563

Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of…

published January 4, 2010

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03639 · 89.5th percentile
Published
2010-01-04T21:00Z
EPSS history
Timeline
  • 04 JAN 21:00Z
    Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of…
    cvelistv5