← Database

CVE-2008-6587

MEDIUM CVSS: 6.8 Published: 2009-04-03 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.

Affected Platforms

Vuze Vuze

Weakness Type

CWE-352

References