CVE-2009-4828

no score yetEPSS 0.9%

Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an admin_created action. NOTE: some of these details are obtained from third party information.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2010-04-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpwebscripts:ad_manager_pro

References

http://secunia.com/advisories/37713
http://www.exploit-db.com/exploits/10438
http://www.vupen.com/english/advisories/2009/3530
http://secunia.com/advisories/37713
http://www.exploit-db.com/exploits/10438

Check your stack JSON