Lucene search

K
nvd[email protected]NVD:CVE-2011-5302
HistoryJan 01, 2015 - 11:59 a.m.

CVE-2011-5302

2015-01-0111:59:08
CWE-352
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.1%

Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials.

Affected configurations

NVD
Node
kubelabsphpdugMatch2.0.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.1%

Related for NVD:CVE-2011-5302