VulnerabilityModified

CVE-2008-3080

Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators.

MEDIUM 5.1EPSS 0.41%

Does this matter?

Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators. NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899.

CVSS 2.0: 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS: 0.41% probability · 35th percentile
CISA KEV: Not listed
Weakness: CWE-352
Affected: mywebland/mybloggie
Source: cve@mitre.org

References

http://www.netvigilance.com/advisory0040Exploit
https://www.exploit-db.com/exploits/5975
http://www.netvigilance.com/advisory0040Exploit
https://www.exploit-db.com/exploits/5975

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.