CVE-2008-6639: CSRF

Published Apr 7, 2009

Updated

Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action.

Affected Software

2 affected components

AjaXplorer AjaXplorer=2.3.3

AjaXplorer AjaXplorer=2.3.4

Event History

Apr 7, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-6639?

CVE-2008-6639 is classified as a high severity vulnerability due to the risk of cross-site request forgery allowing attackers to hijack administrator sessions.

How do I fix CVE-2008-6639?

To fix CVE-2008-6639, upgrade AjaXplorer to a version later than 2.3.4 where this vulnerability is addressed.

What types of actions can be exploited through CVE-2008-6639?

CVE-2008-6639 can be exploited to modify user passwords by hijacking the authentication of administrators.

Which AjaXplorer versions are affected by CVE-2008-6639?

CVE-2008-6639 affects AjaXplorer versions 2.3.3 and 2.3.4.

Who is vulnerable to attacks exploiting CVE-2008-6639?

Administrators using AjaXplorer versions 2.3.3 and 2.3.4 are vulnerable to attacks exploiting CVE-2008-6639.