CVE-2011-0642

2011-01-2519:00:06

CWE-352

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

61.4%

JSON

Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

network-13n-13_newsMatch3.4

network-13n-13_newsMatch3.7

network-13n-13_newsMatch4.0

VendorProductVersionCPE
network-13n-13_news3.4cpe:2.3:a:network-13:n-13_news:3.4:*:*:*:*:*:*:*
network-13n-13_news3.7cpe:2.3:a:network-13:n-13_news:3.7:*:*:*:*:*:*:*
network-13n-13_news4.0cpe:2.3:a:network-13:n-13_news:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
network-13	n-13_news	3.4	cpe:2.3:a:network-13:n-13_news:3.4:::::::*
network-13	n-13_news	3.7	cpe:2.3:a:network-13:n-13_news:3.7:::::::*
network-13	n-13_news	4.0	cpe:2.3:a:network-13:n-13_news:4.0:::::::*