Lucene search
MitreCVE-2008-0266HistoryJan 15, 2008 - 8:00 p.m.
CVE-2008-0266
2008-01-1520:00:00
CWE-352
mitre
web.nvd.nist.gov
23
cve-2008-0266
csrf
eticket
security vulnerability
admin.php
nvd
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
8
Confidence
Low
EPSS
0.011
Percentile
84.9%
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.
Affected configurations
Node
eticketeticketMatch1.5.5.2
Related
prion
prion
Cross site request forgery (csrf)
2008-01-15 20:00:00
cvelist
cvelist
CVE-2008-0266
2008-01-15 19:00:00
exploitdb
exploitdb
eTicket 1.5.5.2 - 'admin.php' Cross-Site Request Forgery
2008-01-07 00:00:00
nvd
nvd
CVE-2008-0266
2008-01-15 20:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
8
Confidence
Low
EPSS
0.011
Percentile
84.9%
Related for CVE-2008-0266