CVE-2010-1542

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-26 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.

Affected products

Dragonfrugal Dfd Cart: through 1.198; 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.192 (+5)

References

http://holisticinfosec.org/content/view/135/45/
http://osvdb.org/62673
http://secunia.com/advisories/38635
http://holisticinfosec.org/content/view/135/45/
http://osvdb.org/62673
http://secunia.com/advisories/38635

Get alerted when CVE-2010-1542 or the next vulnerability affects your stack