CVE

Id
58120  
CVE No.
CVE-2012-4877  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597236 58120 CVE-2012-4877 MISC:http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html  View
597237 58120 CVE-2012-4877 MISC:http://www.vulnerability-lab.com/get_content.php?id=487  View
597238 58120 CVE-2012-4877 BID:52846  View
597239 58120 CVE-2012-4877 URL:http://www.securityfocus.com/bid/52846  View
597240 58120 CVE-2012-4877 OSVDB:80878  View
597241 58120 CVE-2012-4877 URL:http://osvdb.org/80878  View
597242 58120 CVE-2012-4877 SECUNIA:48656  View
597243 58120 CVE-2012-4877 URL:http://secunia.com/advisories/48656  View
597244 58120 CVE-2012-4877 XF:flatnux-controlcenter-csrf(74567)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28488 JVNDB-2012-004195 Dassault Systemes 3D XML Player における権限を取得される脆弱性 Dassault Systemes 3D XML Player には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2012-4882 58120 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004195.html  View