5 matches found
CVE-2007-5032
Cross-site request forgery CSRF vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified addname and addradminsuper parameters...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified addname and addradminsuper parameters...
CVE-2007-5032: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified addname and addradminsuper parameters...
CVE-2000-0720
The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...
CVE-2000-0720: Undefined Security Weakness
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...