5.1

CVE-2007-5032

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

Data is provided by the National Vulnerability Database (NVD)
Francisco Burzi ≫ Php-nuke Version <= 1.0
Francisco Burzi ≫ Php-nuke Version <= 2.5
Francisco Burzi ≫ Php-nuke Version <= 3.0
Francisco Burzi ≫ Php-nuke Version <= 4.0
Francisco Burzi ≫ Php-nuke Version <= 4.0.4
Francisco Burzi ≫ Php-nuke Version <= 4.3
Francisco Burzi ≫ Php-nuke Version <= 4.4
Francisco Burzi ≫ Php-nuke Version <= 4.4.1a
Francisco Burzi ≫ Php-nuke Version <= 5.0
Francisco Burzi ≫ Php-nuke Version <= 5.0.1
Francisco Burzi ≫ Php-nuke Version <= 5.1
Francisco Burzi ≫ Php-nuke Version <= 5.2
Francisco Burzi ≫ Php-nuke Version <= 5.2a
Francisco Burzi ≫ Php-nuke Version <= 5.3.1
Francisco Burzi ≫ Php-nuke Version <= 5.4
Francisco Burzi ≫ Php-nuke Version <= 5.5
Francisco Burzi ≫ Php-nuke Version <= 5.6
Francisco Burzi ≫ Php-nuke Version <= 6.0
Francisco Burzi ≫ Php-nuke Version <= 6.5
Francisco Burzi ≫ Php-nuke Version <= 6.5_beta1
Francisco Burzi ≫ Php-nuke Version <= 6.5_final
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc1
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc2
Francisco Burzi ≫ Php-nuke Version <= 6.5_rc3
Francisco Burzi ≫ Php-nuke Version <= 6.6
Francisco Burzi ≫ Php-nuke Version <= 6.7
Francisco Burzi ≫ Php-nuke Version <= 6.8
Francisco Burzi ≫ Php-nuke Version <= 6.9
Francisco Burzi ≫ Php-nuke Version <= 7.0
Francisco Burzi ≫ Php-nuke Version <= 7.0_final
Francisco Burzi ≫ Php-nuke Version <= 7.1
Francisco Burzi ≫ Php-nuke Version <= 7.2
Francisco Burzi ≫ Php-nuke Version <= 7.3
Francisco Burzi ≫ Php-nuke Version <= 7.4
Francisco Burzi ≫ Php-nuke Version <= 7.5
Francisco Burzi ≫ Php-nuke Version <= 7.6
Francisco Burzi ≫ Php-nuke Version <= 7.7
Francisco Burzi ≫ Php-nuke Version <= 7.8
Francisco Burzi ≫ Php-nuke Version <= 7.8_patched_3.2
Francisco Burzi ≫ Php-nuke Version <= 7.9
Francisco Burzi ≫ Php-nuke Version <= 8.0_final
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.042
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.