CVE-2007-5032

2007-09-2118:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.7%

JSON

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

References

osvdb.org/42521

securityreason.com/securityalert/3157

www.securityfocus.com/archive/1/480107/100/0/threaded