CVE:CVE-2008-7204
CNNVD:CNNVD-200909-219
VirtueMart 1.0.13a版本及其早期版本中存在跨站请求伪造漏洞。远程攻击者可以借助未明向量，劫持管理员认证权限。
solution:Upgrade virtuemart virtuemart to a higher version than 1.0.13,1.0.0,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.1,and avoid the version (,1.0.13],1.0.0,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.1