CVE-2004-1842 Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.
HighCVSS 8.8
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpnuke php-nuke | >= 6.0, <= 7.1 | No fix listed |
References
- 20040322 [waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0] mailing-list
- 11195 broken-link third-party-advisory
- 9895 broken-link exploit third-party-advisory vdb-entry
- phpnuke-img-gain-privileges(15596) third-party-advisory vdb-entry