Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-12-23T21:00:00

Updated: 2024-08-07T07:01:20.155Z

Reserved: 2009-12-23T00:00:00

Link: CVE-2009-4407

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-12-23T21:30:00.267

Modified: 2024-11-21T01:09:34.300

Link: CVE-2009-4407

cve-icon Redhat

No data.