CVE-2008-3736

no score yetEPSS 0.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2008-08-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

spacetag:lacoodast
system_consultants:la_cooda_wiz

References

http://jvn.jp/en/jp/JVN83428818/index.html
http://secunia.com/advisories/31574
http://secunia.com/advisories/31582
http://wiz.syscon.co.jp/Details.htm
http://www.securityfocus.com/bid/30791

Check your stack JSON