CVE-2008-5941 Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
MediumCVSS 6.0
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| modxcms | <= 0.9.6.1 | No fix listed |
| modxcms | = 0.9.0 | No fix listed |
| modxcms | = 0.9.1 | No fix listed |
| modxcms | = 0.9.2.1 | No fix listed |
| modxcms | = 0.9.5 | No fix listed |
| modxcms | = 0.9.6 | No fix listed |
References
- JVN#66828183 third-party-advisory
- JVNDB-2009-000004 third-party-advisory
- svn.modxcms.com