CVE-2009-0648: Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php i...

Security readout for executives and security teams

CVE-2009-0648 describes CSRF flaws in Falt4 CMS, also called Falt4 Extreme, RC4. If an authenticated administrator is tricked into submitting a malicious request, an attacker may cause administrator password changes without the administrator intending it. Exposure is most relevant to organizations still running Falt4 CMS/Falt4 Extreme RC4, especially where the admin interface is reachable by administrators through a browser. The bundle lists affected product metadata as incomplete. Treat this as a targeted legacy-risk item. It is not KEV-listed in the provided bundle, but exposed or unsupported Falt4 CMS admin panels should be reviewed because account control could be affected. Mitigation focus: Check vendor or maintainer guidance for a fixed version or supported replacement.; Restrict administrative access to trusted networks or VPN where possible.; Add CSRF protection and reauthentication around admin password changes if maintaining the code..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.