CVE-2009-4905: Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote...

Security readout for executives and security teams

Acc Statistics 1.1 has CSRF flaws that could let an attacker trick a logged-in administrator into changing account details, including password, username, or email. This is serious where the product still exists, but the provided sources do not identify a patch, CVSS score, or active exploitation. Exposure is likely limited to organizations still running Acc Statistics 1.1, especially if its admin interface is reachable from user workstations or the internet. Treat this as a targeted legacy-application risk. It is not KEV-listed, but admin account manipulation can affect business continuity if the product remains deployed. Mitigation focus: Identify and retire or isolate any Acc Statistics 1.1 deployments.; Check vendor or maintainer guidance for a fixed release or supported replacement.; Restrict access to the administrative interface to trusted networks or VPN users..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.