← Database

CVE-2009-4906

MEDIUM CVSS: 6.8 Published: 2010-06-25 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords.

Affected Platforms

Accscripts Acc Php Email

Weakness Type

CWE-352

References