CVE-2009-4555: Multiple cross-site request forgery (CSRF) vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart G...

Security readout for executives and security teams

CVE-2009-4555 describes administrator-targeted CSRF in older AgoraCart releases. If an authenticated administrator is tricked into making a malicious request, attacker-controlled changes may affect administrative credentials or a .htaccess file. The sources do not provide CVSS, confirmed exploitation, or a named fixed version. Exposure is most likely on legacy public e-commerce sites still running the named AgoraCart versions with reachable administrator functions. Modern or unsupported deployments need inventory confirmation because the source bundle lists affected products inconsistently outside the description. Treat this as a legacy-platform risk. Prioritize if AgoraCart is still internet-facing or supports revenue operations; otherwise track through decommissioning and vendor-support review. Mitigation focus: Inventory AgoraCart installations and confirm exact versions.; Remove or replace unsupported legacy AgoraCart deployments where feasible.; Restrict administrator access to trusted networks or VPN users..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.