{"id":"CVE-2012-0699","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-0699","generatedAt":"2026-10-27T19:44:27.149Z","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or…","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php.","published":"2018-01-11T20:29:00.000Z","lastModified":"2026-06-16T23:38:06.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-352"],"affected":["haudenschilt/family connections cms"],"epss":{"score":0.03567,"percentile":0.89275,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2011-12-10","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":18667,"kind":"exploit","title":"Family CMS 2.9 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/18667","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/18667.html","file":"exploits/php/webapps/18667.html","published":"2012-03-26","added":"2012-03-26","updated":"2012-03-30","author":"Ahmed Elhady Mohamed","type":"webapps","platform":"php","port":null,"verified":true,"codes":["OSVDB-80643","OSVDB-80642","OSVDB-78469","CVE-2012-0699"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":18230,"kind":"exploit","title":"Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities","url":"https://www.exploit-db.com/exploits/18230","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/18230.txt","file":"exploits/php/webapps/18230.txt","published":"2011-12-10","added":"2011-12-10","updated":"2016-10-27","author":"Ahmed Elhady Mohamed","type":"webapps","platform":"php","port":null,"verified":true,"codes":["OSVDB-83198","OSVDB-83197","OSVDB-83196","OSVDB-78470","CVE-2012-0699"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comFCMS_2.7.2.zip","screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"2 public exploits are published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 3.6%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://www.exploit-db.com/exploits/18667","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/18667","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0699","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}