cbcvebase.
CVE-2012-1227
published 2012-02-21

CVE-2012-1227: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests…

PriorityP424medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.68%
47.8th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module.

Affected

1 ranges
VendorProductVersion rangeFixed in
pluck-cmspluck——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.