Unscored severity · published Apr 3, 2009
CVE-2008-6587
Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VU
Vuze · Vuze
0.7.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6587
www.securityfocus.com
http://www.securityfocus.com/archive/1/491066/100/0/threaded
Exploit
http://www.securityfocus.com/bid/28848
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41926