CVE-2008-5941

Published: Jan 22, 2009Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

Affected (6)

Products: Modxcms: Modxcms

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Modxcms Modxcms	Up to 0.9.6.1
Modxcms Modxcms	Version 0.9.0
Modxcms Modxcms	Version 0.9.1
Modxcms Modxcms	Version 0.9.2.1
Modxcms Modxcms	Version 0.9.5
Modxcms Modxcms	Version 0.9.6

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (6)

http://jvn.jp/en/jp/JVN66828183/index.html

Source: cve@mitre.org

http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html

Source: cve@mitre.org

http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt

Source: cve@mitre.org

http://jvn.jp/en/jp/JVN66828183/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.