Skip to content

CVE-2008-5565 Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the Ne...

MediumCVSS 6.8 EPSS 0.99%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters.

Affected products

ProductAffected versionsFixed in
dinkumsoft dl paycart <= 1.34 No fix listed
dinkumsoft dl paycart = 1.01 No fix listed

References

  • 33038 third-party-advisory vendor-advisory
  • 4730 third-party-advisory
  • 7365 exploit