CVE-2008-0575

Webspell - CSRF

Title source: rule

Description

Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action.

Scores

EPSS 0.0013
EPSS Percentile 32.2%

Classification

CWE
CWE-352
Status draft

Affected Products (1)

webspell/webspell

Timeline

Published Feb 05, 2008
Tracked Since Feb 18, 2026