Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077.

Remediation

References

CVE-2009-4076

Related Vulnerabilities

WordPress Plugin Web Invoice-Invoicing and billing for WordPress Multiple SQL Injection Vulnerabilities (2.1.3)

WordPress Plugin Cache-Control Unspecified Vulnerability (2.2.3)

VirtueMart access control bypass

WordPress Plugin MW WP Form Cross-Site Scripting (2.10.0)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5814)

Severity

Medium

Classification

CVE-2009-4076 CWE-352

Tags

Missing Update Known Vulnerabilities