Cross-Site Request Forgery Vulnerability in Datalife Engine by Datalife
CVE-2008-6480

Currently unrated

Key Information:

Vendor: Softnews Media Group
Status: Datalife Engine
Vendor: CVE Published:; 16 March 2009

🔔 Create Softnews Media Group Vulnerability Alert

What is CVE-2008-6480?

A cross-site request forgery vulnerability exists in specific versions of Datalife Engine, allowing attackers to perform actions on behalf of authenticated users by manipulating image parameters. By exploiting this flaw, an attacker can hijack user sessions and gain unauthorized access to sensitive data or functionalities. This highlights the importance of implementing proper security measures to protect against CSRF attacks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/41598

vdb-entryx_refsource_XF

http://www.securityfocus.com/archive/1/490372/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://osvdb.org/51107

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 16, 2009
Vulnerability Reserved
Mar 16, 2009

CVE-2008-6480 Data

JSON