CVE-2008-6587 | BDVDB-2026-35900 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/28848
https://exchange.xforce.ibmcloud.com/vulnerabilities/41926
http://www.securityfocus.com/archive/1/491066/100/0/threaded

Exploit#

No public exploit known

History#

Version 12009-04-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.