CVE-2009-4906

Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.07% chance of exploitation in the next 30 days, 64th percentile

Published

2010-06-25

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/10412

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/10412

Security advisories

• http://secunia.com/advisories/37666
• http://www.vupen.com/english/advisories/2009/3508

References

• CVE Record
• NVD entry