NVD

Id
40389  
Name
CVE-2013-4881  
Description
Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-19  
Modified Date
2013-10-07  
Seq
2013-4881  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205067 40389 CVE-2013-4881 20130807 Multiple Vulnerabilities in BigTree CMS  View
205068 40389 CVE-2013-4881 bigtreecms-cve20134881-csrf(86286)  View
205069 40389 CVE-2013-4881 https://github.com/bigtreecms/BigTree-CMS/commit/4b0faa90fa8b9e1776c86db716894dcd7e6b4834  View
205070 40389 CVE-2013-4881 https://www.htbridge.com/advisory/HTB23165  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22203 JVNDB-2013-003778 BigTree CMS の core/admin/modules/users/create.php におけるクロスサイトリクエストフォージェリの脆弱性 BigTree CMS の core/admin/modules/users/create.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-4881 64823 CVE-2013-4881 40389 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003778.html 2013-07-17 2013-08-20 View