CVE-2009-4092

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

5.34% chance of exploitation in the next 30 days, 93rd percentile

Published

2009-11-27

Updated

2024-08-07

Proof-of-concept exploits (3)

• http://www.exploit-db.com/exploits/10180
• vulsio/go-exploitdb307★ · 2026-06-08
• xiaoyu-iid/Simplog-Exploit0★ · 2018-12-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/10180

Security advisories

• http://secunia.com/advisories/21390
• http://www.securityfocus.com/bid/37063

References

• CVE Record
• NVD entry

Related

• CVE-2006-2896
• CVE-2009-4091
• CVE-2009-4093