CVE-2009-4365 - CVE House
Back to Database
Status published Medium CVE-2009-4365

Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a blog via the add_blog action, (2) approve a comment via the approve_comment action, (3) change administrator information including the password via the admin_opt action, and (4) delete a blog via the delete action.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4365

Credits & Attribution

No credits recorded in the NVD database.

References

More from scriptsez

View All →
CVE-2012-0983
SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers...
High 7.5
CVE-2009-4826
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini...
Medium 6.8
CVE-2009-4683
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote...
High 7.5
CVE-2009-4682
Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows...
Medium 4.3
CVE-2009-4385
Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll...
Medium 6.8

Affected Vendor

Affected Software

ez blog
Vulnerable Versions:
1.0

Timeline

Official Publish: December 21st, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.