Lucene search

[email protected]NVD:CVE-2011-1482

HistoryJun 21, 2011 - 2:52 a.m.

CVE-2011-1482

2011-06-2102:52:42

CWE-352

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.

Affected configurations

NVD

Node

phpnukephp-nukeRange≤8.0

phpnukephp-nukeMatch5.0

phpnukephp-nukeMatch5.0.1

phpnukephp-nukeMatch5.1

phpnukephp-nukeMatch5.2

phpnukephp-nukeMatch5.3

phpnukephp-nukeMatch5.3.1

phpnukephp-nukeMatch5.4

phpnukephp-nukeMatch5.5

phpnukephp-nukeMatch5.6

phpnukephp-nukeMatch6.0

phpnukephp-nukeMatch6.5

phpnukephp-nukeMatch6.6

phpnukephp-nukeMatch6.7

phpnukephp-nukeMatch6.8

phpnukephp-nukeMatch6.9

phpnukephp-nukeMatch7.0

phpnukephp-nukeMatch7.1

phpnukephp-nukeMatch7.2

phpnukephp-nukeMatch7.3

phpnukephp-nukeMatch7.4

phpnukephp-nukeMatch7.5

phpnukephp-nukeMatch7.6

phpnukephp-nukeMatch7.7

phpnukephp-nukeMatch7.8

phpnukephp-nukeMatch7.9

References

www.openwall.com/lists/oss-security/2011/03/23/9

www.openwall.com/lists/oss-security/2011/03/30/8

yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_request_forgery

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Related for NVD:CVE-2011-1482

cve1 cvelist1 prion1 openvas1