Unscored CVE-2009-1459 EUVD-2009-1457GHSA-wrhj-3cw9-q99g

Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrato…

Published Apr 28, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code.

References

34744 third-party-advisory
http://razorcms.co.uk/support/viewtopic.php?f=13&t=325
53778 vdb-entry
20090416 [follow-up] razorCMS - Multiple Vulnerabilities mailing-list
razorcms-unspecified-csrf(49947) vdb-entry
20090416 razorCMS - Multiple Vulnerabilities mailing-list
34566 vdb-entry