CVEvulnerability
CVE-2007-5032
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.
Affected configurations
• francisco burzi php-nuke (<= 1.0)
• francisco burzi php-nuke (<= 2.5)
• francisco burzi php-nuke (<= 3.0)
• francisco burzi php-nuke (<= 4.0)
• francisco burzi php-nuke (<= 4.0.4)
• francisco burzi php-nuke (<= 4.3)
• francisco burzi php-nuke (<= 4.4)
• francisco burzi php-nuke (<= 4.4.1a)
• francisco burzi php-nuke (<= 5.0)
• francisco burzi php-nuke (<= 5.0.1)
• francisco burzi php-nuke (<= 5.1)
• francisco burzi php-nuke (<= 5.2)
• francisco burzi php-nuke (<= 5.2a)
• francisco burzi php-nuke (<= 5.3.1)
• francisco burzi php-nuke (<= 5.4)
• francisco burzi php-nuke (<= 5.5)
• francisco burzi php-nuke (<= 5.6)
• francisco burzi php-nuke (<= 6.0)
• francisco burzi php-nuke (<= 6.5)
• francisco burzi php-nuke (<= 6.5 beta1)
• francisco burzi php-nuke (<= 6.5 final)
• francisco burzi php-nuke (<= 6.5 rc1)
• francisco burzi php-nuke (<= 6.5 rc2)
• francisco burzi php-nuke (<= 6.5 rc3)
• francisco burzi php-nuke (<= 6.6)
• francisco burzi php-nuke (<= 6.7)
• francisco burzi php-nuke (<= 6.8)
• francisco burzi php-nuke (<= 6.9)
• francisco burzi php-nuke (<= 7.0)
• francisco burzi php-nuke (<= 7.0 final)
• francisco burzi php-nuke (<= 7.1)
• francisco burzi php-nuke (<= 7.2)
• francisco burzi php-nuke (<= 7.3)
• francisco burzi php-nuke (<= 7.4)
• francisco burzi php-nuke (<= 7.5)
• francisco burzi php-nuke (<= 7.6)
• francisco burzi php-nuke (<= 7.7)
• francisco burzi php-nuke (<= 7.8)
• francisco burzi php-nuke (<= 7.8 patched 3.2)
• francisco burzi php-nuke (<= 7.9)
• francisco burzi php-nuke (<= 8.0 final)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/42521 osvdb.org
- http://securityreason.com/securityalert/3157 securityreason.com
- http://www.securityfocus.com/archive/1/480107/100/0/threaded www.securityfocus.com
- http://osvdb.org/42521 osvdb.org
- http://securityreason.com/securityalert/3157 securityreason.com
- http://www.securityfocus.com/archive/1/480107/100/0/threaded www.securityfocus.com