CVE-2009-3022

6.5 mediumEPSS 1.0%

Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2009-08-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

itd-inc:bingo\!cms

References

http://jvn.jp/en/jp/JVN68640473/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html
http://osvdb.org/57425
http://secunia.com/advisories/36458
http://www.bingo-cms.jp/security/jvn68640473.html

Check your stack JSON