Skip to content
OpenAdvisories
Unscored CVE-2010-1542 EUVD-2010-1569GHSA-hrp5-wx8w-j6c5

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attack…

Published Apr 26, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

References