Unscored severity · published Jul 17, 2007
CVE-2007-3821
Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webcit · Citadel
through 7.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3821
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3821
osvdb.org
http://osvdb.org/38181
Vendor Advisory
http://secunia.com/advisories/26090
securityreason.com
http://securityreason.com/securityalert/2890
www.securityfocus.com
http://www.securityfocus.com/archive/1/473714/100/0/threaded
Exploit
http://www.securityfocus.com/bid/24913
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35432
More from Webcit
9.8
CVE-2020-27739
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions
6.5
CVE-2020-27742
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move…
6.1
CVE-2020-27741
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters
5.9
CVE-2020-29547
An issue was discovered in Citadel through webcit-926
5.3
CVE-2020-27740
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform