VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 1, 2009· Updated Jun 16, 2026

CVE-2009-4121

CVE-2009-4121

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete web pages via a p-delete action to admin.php, and possibly (2) delete products or (3) delete orders via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected products

4
  • Open Solution/Quick.CMS2 versions
    cpe:2.3:a:opensolution:quick.cms:2.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:opensolution:quick.cms:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:opensolution:quick.cms.lite:2.4:*:*:*:*:*:*:*
  • Lite CMS/Lite CMSllm-fuzzy
    Range: =2.4
  • QuickCMS/QuickCMSllm-fuzzy
    Range: =2.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.