CVE-2012-4877 Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that ad...
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flatnux | <= 2011-08-09-2 | No fix listed |
| flatnux | = 2008-12-11 | No fix listed |
| flatnux | = 2009-01-27 | No fix listed |
| flatnux | = 2009-02-04 | No fix listed |
References
- 80878 vdb-entry
- packetstormsecurity.org exploit
- 48656 third-party-advisory vendor-advisory
- 52846 exploit vdb-entry
- www.vulnerability-lab.com
- flatnux-controlcenter-csrf(74567) vdb-entry