CVE-2007-4193 : Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by (1) modifying data or (2) canceling a subscription. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.

Published 2007-08-08 01:17:00

Updated 2017-07-29 01:32:47

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross-site request forgery (CSRF)

Exploit prediction scoring system (EPSS) score for CVE-2007-4193

EPSS FAQ

0.81%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-4193

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

Products affected by CVE-2007-4193

Ide Group » Dvd Rental System Drs » Version: 5.1
cpe:2.3:a:ide_group:dvd_rental_system_drs:5.1:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2007-4193

Exploit prediction scoring system (EPSS) score for CVE-2007-4193

CVSS scores for CVE-2007-4193

References for CVE-2007-4193

Products affected by CVE-2007-4193