CVE-2007-6087 Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
MediumCVSS 6.8
EPSS 0.99%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vigilecms | = 1.4 | No fix listed |
References
- 20071118 VigileCMS 1.4 Multiple Remote Vulnerabilities mailing-list
- 26484 vdb-entry
- vigilecms-index-csrf(38558) vdb-entry
- 4632 exploit