CVE-2008-7243: CSRF

Published Sep 17, 2009

Updated

Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

Affected Software

2 affected components

Modxcms Modxcms=0.9.6.1-p1

Modxcms Modxcms=0.9.6.1

Event History

Sep 17, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-7243?

CVE-2008-7243 is considered a high severity vulnerability due to the potential for CSRF attacks that can compromise user accounts.

How do I fix CVE-2008-7243?

To fix CVE-2008-7243, upgrade to a patched version of MODx CMS, or implement CSRF protection measures in your application.

What impact does CVE-2008-7243 have on MODx CMS users?

CVE-2008-7243 allows attackers to hijack the authentication of users, potentially leading to unauthorized password modifications.

Which versions of MODx CMS are affected by CVE-2008-7243?

CVE-2008-7243 affects MODx CMS versions 0.9.6.1 and 0.9.6.1p1.

Is CVE-2008-7243 easily exploitable?

Yes, CVE-2008-7243 is easily exploitable as it relies on CSRF techniques that can be triggered without user interaction.