CVE-2008-5400
Published Dec 10, 2008
Last updated 9 months ago
Overview
- Description
- Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03DC374E-FC63-4F75-A506-9CBA0CC680AD",
"versionEndIncluding": "1.2"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C451367-C9A9-4D35-B873-DBF1884B405A"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9B9221-C1EA-4C76-B9E5-A6D79AE5D7C7"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD68AA01-B64F-4A9A-A542-807D58CD2389"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66AFBB80-EA66-4C0B-93DB-6294733CD107"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA2751D2-7F4D-480F-B646-AF8DDB72BF6B"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09B0F1B0-BFBA-4549-B140-3FAD86820369"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "008038D2-7B8E-43DF-95D7-FD425710DD78"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2FF3125-8BCA-4E22-9539-1613E24AEA72"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "150FFB30-9CDF-428C-B846-6F3C4B7935C7"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA97C851-1E4E-4055-96E6-689816EC0A1D"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B2FDF5C-373B-4F82-A7B1-1974E6E2DD9D"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A39EBC4-9D83-42FE-8BB5-5E2581664DD4"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc3_01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B43F991-B9E6-4D22-9EDE-F5C29984E99C"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFEA96C0-26D5-4F17-8BDB-7EA7F7E470B5"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4_04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0B00343-C685-4F40-866F-1424CBE89863"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "352C4C7D-13C8-4063-923D-8968ECD141EE"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0_ga:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEDA805E-2B55-49B4-80E6-6A52DBB04D59"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0_rc4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8DD6FBA-DE95-4D53-8CB3-9676B6B6CDE1"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BD947A2-2FA1-443A-A213-47FF1C76A188"
}
],
"operator": "OR"
}
]
}
]