Back to Database
Status published
Medium
CVE-2008-5400
Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1...
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5400
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361
- http://securityreason.com/securityalert/4699
- http://secunia.com/advisories/32931
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47027
- http://security.bkis.vn/?p=286
- http://osvdb.org/50404
- http://www.securityfocus.com/archive/1/498872/100/0/threaded
- http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0061.html
More from mvnforum
View All →CVE-2008-5399
Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online")...
Medium
4.3
CVE-2006-3245
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0...
Low
2.6
CVE-2005-1183
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote...
Medium
4.3
Affected Vendor
mvnforum
View all reports →Affected Software
mvnforum
Vulnerable Versions:
0, 1.0.0, 1.0.0_beta1, 1.0.0_beta2, 1.0.0_beta3, 1.0.0_rc1, 1.0.0_rc2, 1.0.0_rc3_01, 1.0.0_rc4, 1.0.0_rc4_04, 1.0.2., 1.0_ga, 1.0_rc4, 1.1
Timeline
Official Publish:
December 9th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.