CVE-2011-0503 | BDVDB-2026-44799 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that (1) change user status via admin/customers.php or (2) change user permissions via admin/accounting.php. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/70431
http://secunia.com/advisories/42869
http://www.htbridge.ch/advisory/xsrf_csrf_in_vam_shop.html
http://www.securityfocus.com/archive/1/515613/100/0/threaded
http://www.exploit-db.com/exploits/15968

Exploit#

http://www.exploit-db.com/exploits/15968

History#

Version 12011-01-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.