VulnerabilityModified
CVE-2012-4877
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
MEDIUM 6.8EPSS 1.18%
Does this matter?
Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.18% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- flatnux/flatnux
- Source
- cve@mitre.org
References
- http://osvdb.org/80878
- http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlExploit
- http://secunia.com/advisories/48656Vendor Advisory
- http://www.securityfocus.com/bid/52846Exploit
- http://www.vulnerability-lab.com/get_content.php?id=487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74567
- http://osvdb.org/80878
- http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlExploit
- http://secunia.com/advisories/48656Vendor Advisory
- http://www.securityfocus.com/bid/52846Exploit
- http://www.vulnerability-lab.com/get_content.php?id=487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74567
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.