Lucene search

[email protected]CVE-2011-1482

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-1482

2022-10-0316:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve

2011

1482

csrf

vulnerabilities

php-nuke

security

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.

Affected configurations

NVD

Node

phpnukephp-nukeRange≤8.0

phpnukephp-nukeMatch5.0

phpnukephp-nukeMatch5.0.1

phpnukephp-nukeMatch5.1

phpnukephp-nukeMatch5.2

phpnukephp-nukeMatch5.3

phpnukephp-nukeMatch5.3.1

phpnukephp-nukeMatch5.4

phpnukephp-nukeMatch5.5

phpnukephp-nukeMatch5.6

phpnukephp-nukeMatch6.0

phpnukephp-nukeMatch6.5

phpnukephp-nukeMatch6.6

phpnukephp-nukeMatch6.7

phpnukephp-nukeMatch6.8

phpnukephp-nukeMatch6.9

phpnukephp-nukeMatch7.0

phpnukephp-nukeMatch7.1

phpnukephp-nukeMatch7.2

phpnukephp-nukeMatch7.3

phpnukephp-nukeMatch7.4

phpnukephp-nukeMatch7.5

phpnukephp-nukeMatch7.6

phpnukephp-nukeMatch7.7

phpnukephp-nukeMatch7.8

phpnukephp-nukeMatch7.9

CPENameOperatorVersion
phpnuke:php-nukephpnuke php-nukele8.0
phpnuke:php-nukephpnuke php-nukeeq5.0
phpnuke:php-nukephpnuke php-nukeeq5.0.1
phpnuke:php-nukephpnuke php-nukeeq5.1
phpnuke:php-nukephpnuke php-nukeeq5.2
phpnuke:php-nukephpnuke php-nukeeq5.3
phpnuke:php-nukephpnuke php-nukeeq5.3.1
phpnuke:php-nukephpnuke php-nukeeq5.4
phpnuke:php-nukephpnuke php-nukeeq5.5
phpnuke:php-nukephpnuke php-nukeeq5.6

CPE	Name	Operator	Version
phpnuke:php-nuke	phpnuke php-nuke	le	8.0
phpnuke:php-nuke	phpnuke php-nuke	eq	5.0
phpnuke:php-nuke	phpnuke php-nuke	eq	5.0.1
phpnuke:php-nuke	phpnuke php-nuke	eq	5.1
phpnuke:php-nuke	phpnuke php-nuke	eq	5.2
phpnuke:php-nuke	phpnuke php-nuke	eq	5.3
phpnuke:php-nuke	phpnuke php-nuke	eq	5.3.1
phpnuke:php-nuke	phpnuke php-nuke	eq	5.4
phpnuke:php-nuke	phpnuke php-nuke	eq	5.5
phpnuke:php-nuke	phpnuke php-nuke	eq	5.6

Rows per page:

1-10 of 261

References

www.openwall.com/lists/oss-security/2011/03/23/9

www.openwall.com/lists/oss-security/2011/03/30/8

yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_request_forgery

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Related for CVE-2011-1482

cvelist1 prion1 nvd1 openvas1