CVEvulnerability

CVE-2007-5032

5.1 MEDIUM Published 2007-09-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-09-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

Affected configurations

• francisco burzi php-nuke (<= 1.0) • francisco burzi php-nuke (<= 2.5) • francisco burzi php-nuke (<= 3.0) • francisco burzi php-nuke (<= 4.0) • francisco burzi php-nuke (<= 4.0.4) • francisco burzi php-nuke (<= 4.3) • francisco burzi php-nuke (<= 4.4) • francisco burzi php-nuke (<= 4.4.1a) • francisco burzi php-nuke (<= 5.0) • francisco burzi php-nuke (<= 5.0.1) • francisco burzi php-nuke (<= 5.1) • francisco burzi php-nuke (<= 5.2) • francisco burzi php-nuke (<= 5.2a) • francisco burzi php-nuke (<= 5.3.1) • francisco burzi php-nuke (<= 5.4) • francisco burzi php-nuke (<= 5.5) • francisco burzi php-nuke (<= 5.6) • francisco burzi php-nuke (<= 6.0) • francisco burzi php-nuke (<= 6.5) • francisco burzi php-nuke (<= 6.5 beta1) • francisco burzi php-nuke (<= 6.5 final) • francisco burzi php-nuke (<= 6.5 rc1) • francisco burzi php-nuke (<= 6.5 rc2) • francisco burzi php-nuke (<= 6.5 rc3) • francisco burzi php-nuke (<= 6.6) • francisco burzi php-nuke (<= 6.7) • francisco burzi php-nuke (<= 6.8) • francisco burzi php-nuke (<= 6.9) • francisco burzi php-nuke (<= 7.0) • francisco burzi php-nuke (<= 7.0 final) • francisco burzi php-nuke (<= 7.1) • francisco burzi php-nuke (<= 7.2) • francisco burzi php-nuke (<= 7.3) • francisco burzi php-nuke (<= 7.4) • francisco burzi php-nuke (<= 7.5) • francisco burzi php-nuke (<= 7.6) • francisco burzi php-nuke (<= 7.7) • francisco burzi php-nuke (<= 7.8) • francisco burzi php-nuke (<= 7.8 patched 3.2) • francisco burzi php-nuke (<= 7.9) • francisco burzi php-nuke (<= 8.0 final)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References