Lucene search
HistoryAug 19, 2013 - 1:07 p.m.
CVE-2013-4881
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
59.6%
Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php.
Affected configurations
Node
bigtreecmsbigtree_cmsRange≤4.0rc2
ORbigtreecmsbigtree_cmsMatch4.0b1
ORbigtreecmsbigtree_cmsMatch4.0b2
ORbigtreecmsbigtree_cmsMatch4.0b3
ORbigtreecmsbigtree_cmsMatch4.0b4
ORbigtreecmsbigtree_cmsMatch4.0b5
ORbigtreecmsbigtree_cmsMatch4.0b6
ORbigtreecmsbigtree_cmsMatch4.0b7
ORbigtreecmsbigtree_cmsMatch4.0rc1
Related
prion
prion
Cross site request forgery (csrf)
2013-08-19 13:07:00
exploitdb
exploitdb
BigTree CMS Cross Site Request Forgery Vulnerability
2013-07-17 00:00:00
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
2013-08-08 00:00:00
cvelist
cvelist
CVE-2013-4881
2013-08-19 00:00:00
cve
cve
CVE-2013-4881
2013-08-19 13:07:58
exploitpack
exploitpack
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
2013-08-08 00:00:00
packetstorm
packetstorm
BigTree CMS 4.0 RC2 XSS / CSRF / SQL Injection
2013-08-08 00:00:00
securityvulns
securityvulns
Multiple Vulnerabilities in BigTree CMS
2013-09-09 00:00:00
htbridge
htbridge
Multiple Vulnerabilities in BigTree CMS
2013-07-17 00:00:00
openvas
openvas
BigTree CMS Multiple Vulnerabilities
2013-08-19 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
59.6%
Related for NVD:CVE-2013-4881