Unscored CVE-2008-6480 EUVD-2008-6450GHSA-fjw5-gg3p-qgcr

Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack…

Published Mar 16, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter.

References

datalifeengine-imagepreview-csrf(41598) vdb-entry
20080401 Datalife Engine 6.7 XSRF mailing-list
51107 vdb-entry