CVE-2012-4325

EUVD-2012-4269
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
utopiasoftwarenews_pro
𝑥
≤ 1.4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/80986
http://www.exploit-db.com/exploits/18720
https://exchange.xforce.ibmcloud.com/vulnerabilities/74760
http://osvdb.org/80986
http://www.exploit-db.com/exploits/18720
https://exchange.xforce.ibmcloud.com/vulnerabilities/74760