Description
Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the update_user_pwd action.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42694
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/45656
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30383
Exploit x_refsource_misc
http://gmda.altervista.org/AjaXplorer-2.3.3/cka.txt
Scores
EPSS
0.0063
EPSS Percentile
45.9%
Details
CWE
CWE-352
Status
published
Products (2)
ajaxplorer/ajaxplorer
2.3.3
ajaxplorer/ajaxplorer
2.3.4
Published
Apr 07, 2009
Tracked Since
Feb 18, 2026