CVEvulnerability
CVE-2012-4877
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
Affected configurations
• flatnux flatnux (<= 2011-08-09-2)
• flatnux flatnux 2008-12-11
• flatnux flatnux 2009-01-27
• flatnux flatnux 2009-02-04
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/80878 osvdb.org
- http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html Exploit
- http://secunia.com/advisories/48656 Vendor Advisory
- http://www.securityfocus.com/bid/52846 Exploit
- http://www.vulnerability-lab.com/get_content.php?id=487 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74567 exchange.xforce.ibmcloud.com
- http://osvdb.org/80878 osvdb.org
- http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html Exploit
- http://secunia.com/advisories/48656 Vendor Advisory
- http://www.securityfocus.com/bid/52846 Exploit
- http://www.vulnerability-lab.com/get_content.php?id=487 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74567 exchange.xforce.ibmcloud.com