CVE-2008-3868

Interact 2.4.1 - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts.

References (5)

[Vendor Advisory] http://secunia.com/advisories/32434

[Vendor Advisory] http://secunia.com/secunia_research/2008-44/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46269

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/497967/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/4537

Scores

EPSS 0.0016

EPSS Percentile 37.2%

Classification

CWE

CWE-352

Status draft

Affected Products (1)

cce-interact/interact

Timeline

Published Nov 03, 2008

Tracked Since Feb 18, 2026