CVE-2010-0709

CVE-2010-0709 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Limny 2.0. These flaws allow remote attackers to hijack authenticated user or administrator sessions to perform actions such as changing email addresses or passwords, or creating new administrator accounts. With a CVSS score of 6.8, this vulnerability is considered medium severity, indicating a network-based attack with medium complexity that could lead to partial confidentiality, integrity, and availability impacts. While not listed on KEV or Hot Lists, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.