CVE-2009-4555: K-Factor Agoracart

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 allow remote attackers to hijack the authentication of administrators for requests that (1) modify a .htaccess file via an unspecified request to protected/manager.cgi or (2) change the password of an administrative account.

Affected products

• K-Factor Agoracart: affected versions not specified; version 5.2.005 only; version 5.2.006 only

Published 2010-01-04. Last modified 2026-06-16.