CSRF in Dragonfrugal Dfd Cart

CVE-2010-1542

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (43.6th percentile) — read the EPSS interpretation.

Affected products

Dragonfrugal Dfd_cart — versions 1.194, 1.1.8, 1.192
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)