CVE-2009-0408

Description

Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.

Affected Platforms

Weakness Type

CWE-352

References

• http://holisticinfosec.org/content/view/97/45/
• http://osvdb.org/51605
• http://secunia.com/advisories/33446
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48289
• http://holisticinfosec.org/content/view/97/45/
• http://osvdb.org/51605