CVE-2007-4193

MEDIUM 4.3CVE-2007-4193 · Published 08/08/2007 · updated 16/06/2026

In short

CVE-2007-4193 is a MEDIUM (CVSS 4.3) vulnerability affecting dvd rental system drs (ide group).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dvd rental system drs ide_group	`= 5.1`	No fix yet

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by (1) modifying data or (2) canceling a subscription. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.

References

More vulnerabilities in dvd rental system drs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free