Lucene search

RedhatCVE-2011-1482

HistoryJun 21, 2011 - 2:52 a.m.

CVE-2011-1482

2011-06-2102:52:42

CWE-352

redhat

web.nvd.nist.gov

cve

2011

1482

csrf

vulnerabilities

php-nuke

security

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.

Affected configurations

Nvd

Node

phpnukephp-nukeRange≤8.0

phpnukephp-nukeMatch5.0

phpnukephp-nukeMatch5.0.1

phpnukephp-nukeMatch5.1

phpnukephp-nukeMatch5.2

phpnukephp-nukeMatch5.3

phpnukephp-nukeMatch5.3.1

phpnukephp-nukeMatch5.4

phpnukephp-nukeMatch5.5

phpnukephp-nukeMatch5.6

phpnukephp-nukeMatch6.0

phpnukephp-nukeMatch6.5

phpnukephp-nukeMatch6.6

phpnukephp-nukeMatch6.7

phpnukephp-nukeMatch6.8

phpnukephp-nukeMatch6.9

phpnukephp-nukeMatch7.0

phpnukephp-nukeMatch7.1

phpnukephp-nukeMatch7.2

phpnukephp-nukeMatch7.3

phpnukephp-nukeMatch7.4

phpnukephp-nukeMatch7.5

phpnukephp-nukeMatch7.6

phpnukephp-nukeMatch7.7

phpnukephp-nukeMatch7.8

phpnukephp-nukeMatch7.9

VendorProductVersionCPE
phpnukephp-nuke*cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*
phpnukephp-nuke5.0cpe:2.3:a:phpnuke:php-nuke:5.0:*:*:*:*:*:*:*
phpnukephp-nuke5.0.1cpe:2.3:a:phpnuke:php-nuke:5.0.1:*:*:*:*:*:*:*
phpnukephp-nuke5.1cpe:2.3:a:phpnuke:php-nuke:5.1:*:*:*:*:*:*:*
phpnukephp-nuke5.2cpe:2.3:a:phpnuke:php-nuke:5.2:*:*:*:*:*:*:*
phpnukephp-nuke5.3cpe:2.3:a:phpnuke:php-nuke:5.3:*:*:*:*:*:*:*
phpnukephp-nuke5.3.1cpe:2.3:a:phpnuke:php-nuke:5.3.1:*:*:*:*:*:*:*
phpnukephp-nuke5.4cpe:2.3:a:phpnuke:php-nuke:5.4:*:*:*:*:*:*:*
phpnukephp-nuke5.5cpe:2.3:a:phpnuke:php-nuke:5.5:*:*:*:*:*:*:*
phpnukephp-nuke5.6cpe:2.3:a:phpnuke:php-nuke:5.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpnuke	php-nuke	*	cpe:2.3:a:phpnuke:php-nuke::::::::
phpnuke	php-nuke	5.0	cpe:2.3:a:phpnuke:php-nuke:5.0:::::::*
phpnuke	php-nuke	5.0.1	cpe:2.3:a:phpnuke:php-nuke:5.0.1:::::::*
phpnuke	php-nuke	5.1	cpe:2.3:a:phpnuke:php-nuke:5.1:::::::*
phpnuke	php-nuke	5.2	cpe:2.3:a:phpnuke:php-nuke:5.2:::::::*
phpnuke	php-nuke	5.3	cpe:2.3:a:phpnuke:php-nuke:5.3:::::::*
phpnuke	php-nuke	5.3.1	cpe:2.3:a:phpnuke:php-nuke:5.3.1:::::::*
phpnuke	php-nuke	5.4	cpe:2.3:a:phpnuke:php-nuke:5.4:::::::*
phpnuke	php-nuke	5.5	cpe:2.3:a:phpnuke:php-nuke:5.5:::::::*
phpnuke	php-nuke	5.6	cpe:2.3:a:phpnuke:php-nuke:5.6:::::::*

Rows per page:

1-10 of 261

References

www.openwall.com/lists/oss-security/2011/03/23/9

www.openwall.com/lists/oss-security/2011/03/30/8

yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_request_forgery

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

Related for CVE-2011-1482