CVE-2008-3736

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.

Link	Resource
http://jvn.jp/en/jp/JVN83428818/index.html
http://wiz.syscon.co.jp/Details.htm
http://www.securityfocus.com/bid/30791
http://secunia.com/advisories/31574	Vendor Advisory
http://secunia.com/advisories/31582	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44592

Configuration 1

cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:* cpe:2.3:a:system_consultants:la_cooda_wiz:*:*:*:*:*:*:*:*

---

Published : 2008-08-27 08:41

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3736

Mitre link : CVE-2008-3736

No products.

CWE-352