Unrated severityNVD Advisory· Published Feb 19, 2009· Updated Jun 16, 2026
CVE-2009-0648
CVE-2009-0648
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions.
Affected products
2- cpe:2.3:a:falt4:falt4_extreme:rc4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.