CVE-2008-7221 Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user p...
MediumCVSS 6.8
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| runcms | = 1.6.1 | No fix listed |
References
- 20080216 RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties mailing-list
- runcms-admin-csrf(40628) vdb-entry