CVE-2009-4942
ACollab 1.2 - Cross-Site Request Forgery for Personal Agenda Item Addition
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50835
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35173
Various Sources x_refsource_misc
http://holisticinfosec.org/content/view/115/45/
Scores
EPSS
0.0052
EPSS Percentile
40.7%
Details
CWE
CWE-352
Status
published
Products (1)
atutor/acollab
1.2
Published
Jul 22, 2010
Tracked Since
Feb 18, 2026