Lucene search

K
cvelistMitreCVELIST:CVE-2012-0997
HistoryFeb 20, 2012 - 7:00 p.m.

CVE-2012-0997

2012-02-2019:00:00
mitre
www.cve.org
7
cve-2012-0997
cross-site request forgery
admin/index.php
hijacking authentication

AI Score

7

Confidence

Low

EPSS

0.004

Percentile

72.3%

Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.

AI Score

7

Confidence

Low

EPSS

0.004

Percentile

72.3%