5.1

CVE-2007-5032

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Francisco Burzi ≫ Php-nuke Version <= 1.0
Francisco Burzi ≫ Php-nuke Version <= 2.5
Francisco Burzi ≫ Php-nuke Version <= 3.0
Francisco Burzi ≫ Php-nuke Version <= 4.0
Francisco Burzi ≫ Php-nuke Version <= 4.0.4
Francisco Burzi ≫ Php-nuke Version <= 4.3
Francisco Burzi ≫ Php-nuke Version <= 4.4
Francisco Burzi ≫ Php-nuke Version <= 4.4.1a
Francisco Burzi ≫ Php-nuke Version <= 5.0
Francisco Burzi ≫ Php-nuke Version <= 5.0.1
Francisco Burzi ≫ Php-nuke Version <= 5.1
Francisco Burzi ≫ Php-nuke Version <= 5.2
Francisco Burzi ≫ Php-nuke Version <= 5.2a
Francisco Burzi ≫ Php-nuke Version <= 5.3.1
Francisco Burzi ≫ Php-nuke Version <= 5.4
Francisco Burzi ≫ Php-nuke Version <= 5.5
Francisco Burzi ≫ Php-nuke Version <= 5.6
Francisco Burzi ≫ Php-nuke Version <= 6.0
Francisco Burzi ≫ Php-nuke Version <= 6.5
Francisco Burzi ≫ Php-nuke Version <= 6.5_beta1
Francisco Burzi ≫ Php-nuke Version <= 6.5_final
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc1
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc2
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc3
Francisco Burzi ≫ Php-nuke Version <= 6.6
Francisco Burzi ≫ Php-nuke Version <= 6.7
Francisco Burzi ≫ Php-nuke Version <= 6.8
Francisco Burzi ≫ Php-nuke Version <= 6.9
Francisco Burzi ≫ Php-nuke Version <= 7.0
Francisco Burzi ≫ Php-nuke Version <= 7.0_final
Francisco Burzi ≫ Php-nuke Version <= 7.1
Francisco Burzi ≫ Php-nuke Version <= 7.2
Francisco Burzi ≫ Php-nuke Version <= 7.3
Francisco Burzi ≫ Php-nuke Version <= 7.4
Francisco Burzi ≫ Php-nuke Version <= 7.5
Francisco Burzi ≫ Php-nuke Version <= 7.6
Francisco Burzi ≫ Php-nuke Version <= 7.7
Francisco Burzi ≫ Php-nuke Version <= 7.8
Francisco Burzi ≫ Php-nuke Version <= 7.8_patched_3.2
Francisco Burzi ≫ Php-nuke Version <= 7.9
Francisco Burzi ≫ Php-nuke Version <= 8.0_final
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.424
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://osvdb.org/42521
http://securityreason.com/securityalert/3157
http://www.securityfocus.com/archive/1/480107/100/0/threaded