Medium severity6.5NVD Advisory· Published Aug 31, 2009· Updated Apr 23, 2026
CVE-2009-3022
CVE-2009-3022
Description
Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.
Affected products
2cpe:2.3:a:itd-inc:bingo\!cms:*:-:commercial:*:*:*:*:*+ 1 more
- cpe:2.3:a:itd-inc:bingo\!cms:*:-:commercial:*:*:*:*:*range: <=1.2
- cpe:2.3:a:itd-inc:bingo\!cms:*:-:core:*:*:*:*:*range: <=1.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- jvn.jp/en/jp/JVN68640473/index.htmlnvdThird Party Advisory
- jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.htmlnvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/36458nvdBroken LinkVendor Advisory
- www.bingo-cms.jp/security/jvn68640473.htmlnvdBroken LinkVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/52838nvdThird Party AdvisoryVDB Entry
- osvdb.org/57425nvdBroken Link
News mentions
0No linked articles in our index yet.