CVE-2009-0708

Published: Feb 23, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack the authentication of arbitrary users via vectors involving the profile page.

Affected (6)

Products: Semanticscuttle: Semanticscuttle

Semanticscuttle

1 product

Semanticscuttle

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Semanticscuttle Semanticscuttle	Up to 0.90
Semanticscuttle Semanticscuttle	Version 0.85
Semanticscuttle Semanticscuttle	Version 0.86
Semanticscuttle Semanticscuttle	Version 0.87
Semanticscuttle Semanticscuttle	Version 0.88
Semanticscuttle Semanticscuttle	Version 0.89