CVE-2012-4877
published 2012-09-06CVE-2012-4877: Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the…
PriorityP429medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
1.18%
63.9th percentile
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| flatnux | flatnux | <= 2011-08-09-2 | — |
| flatnux | flatnux | — | — |
| flatnux | flatnux | — | — |
| flatnux | flatnux | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/80878http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlhttp://secunia.com/advisories/48656http://www.securityfocus.com/bid/52846http://www.vulnerability-lab.com/get_content.php?id=487https://exchange.xforce.ibmcloud.com/vulnerabilities/74567http://osvdb.org/80878http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlhttp://secunia.com/advisories/48656http://www.securityfocus.com/bid/52846http://www.vulnerability-lab.com/get_content.php?id=487https://exchange.xforce.ibmcloud.com/vulnerabilities/74567
2012-09-06
Published