CVE-2009-0648
Falt4 CMS RC4 - Cross-Site Request Forgery in manage_users Handler
Title source: llmDescription
Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions.
References (3)
Core 3
Core References
Exploit x_refsource_misc
http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/33973
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48786
Scores
EPSS
0.0063
EPSS Percentile
45.9%
Details
CWE
CWE-352
Status
published
Products (1)
falt4/falt4_extreme
rc4
Published
Feb 19, 2009
Tracked Since
Feb 18, 2026