← Database

CVE-2009-4092

MEDIUM CVSS: 6.8 Published: 2009-11-29 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

Affected Platforms

Simplog Simplog

Weakness Type

CWE-352

References