VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2009· Updated Jun 16, 2026

CVE-2008-7221

CVE-2008-7221

Description

Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.

Affected products

2
  • Runcms/Runcms2 versions
    cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*
    • (no CPE)range: =1.6.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.