CVE-2009-4572
PhpShop 0.8.1 - Cross-Site Request Forgery via cartAdd Function
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default URI.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/54587
Exploit x_refsource_misc
http://www.andreafabrizi.it/?exploits:phpshop
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31948
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/508270/100/0/threaded
Scores
EPSS
0.0063
EPSS Percentile
45.9%
Details
CWE
CWE-352
Status
published
Products (1)
phpshop/phpshop
0.8.1
Published
Jan 05, 2010
Tracked Since
Feb 18, 2026