CVE-2008-0165

N/A Unknown
Published: April 21, 2008 Modified: April 23, 2026
View on NVD

Description

Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445
Source: af854a3a-2127-422b-91ae-364da2661108
http://ikiwiki.info/security/#index31h2
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29907
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29932
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2008/dsa-1553
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2008/1297/references
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/41904
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.2%
47th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

ikiwiki