CVE-2012-1203 Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user acco...

MediumCVSS 6.8 EPSS 1.1%

Published: 2014-12-28 14:56 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 02:39
Exploit status: No public exploit known

Description

Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a save_user action.

Affected products

Product	Affected versions	Fixed in
syndeocms	<= 3.0.00	No fix listed

References

18498 exploit

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.06% (percentile 65.0)
CWE: CWE-352

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

SyndeoCMS 3.0 - Cross-Site Request Forgery Exploit · Exploit Database (OffSec) · 2012-02-19