CVE-2009-4907

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-25 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog.

Affected products

Dootzky Oblog: all versions

References

http://osvdb.org/60907
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
http://secunia.com/advisories/37661
https://exchange.xforce.ibmcloud.com/vulnerabilities/54714
http://osvdb.org/60907
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
http://secunia.com/advisories/37661
https://exchange.xforce.ibmcloud.com/vulnerabilities/54714

Get alerted when CVE-2009-4907 or the next vulnerability affects your stack