Unrated severityNVD Advisory· Published Feb 19, 2009· Updated Apr 23, 2026
CVE-2009-0648
CVE-2009-0648
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions.
Affected products
1- cpe:2.3:a:falt4:falt4_extreme:rc4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.