Lucene search

K
cvelistMitreCVELIST:CVE-2012-4902
HistoryMay 20, 2015 - 7:00 p.m.

CVE-2012-4902

2015-05-2019:00:00
mitre
raw.githubusercontent.com
1

8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.

8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%