cbcvebase.
CVE-2011-1482
published 2011-06-21

CVE-2011-1482: Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the…

PriorityP425medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.64%
46.0th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
phpnukephp-nuke<= 8.0—
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——
phpnukephp-nuke——

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.