cbcvebase.
CVE-2012-3231
published 2012-06-27

CVE-2012-3231: Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the…

PriorityP428medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.53%
71.6th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary code via a do_addfile action to inc/browser/action.php.

Affected

1 ranges
VendorProductVersion rangeFixed in
webatallweb_all——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.