Published: 22/05/2009 Updated: 22/05/2009

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 prior to 1.53 and 1.6 prior to 1.61 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
transmissionbt transmission 1.51
transmissionbt transmission 1.60
transmissionbt transmission 1.50
transmissionbt transmission 1.52

It was discovered that the Transmission web interface was vulnerable to cross-site request forgery (CSRF) attacks If a user were tricked into opening a specially crafted web page in a browser while Transmission was running, an attacker could trigger commands in Transmission This issue affected Ubuntu 904 (CVE-2009-1757) ...

CWE-352 http://www.transmissionbt.com/index.php http://www.openwall.com/lists/oss-security/2009/05/21/1 https://usn.ubuntu.com/885-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-1757

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect