CVE-2012-4325

Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
utopiasoftwarenews_pro
𝑥
≤ 1.4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/80986
http://www.exploit-db.com/exploits/18720
https://exchange.xforce.ibmcloud.com/vulnerabilities/74760
http://osvdb.org/80986
http://www.exploit-db.com/exploits/18720
https://exchange.xforce.ibmcloud.com/vulnerabilities/74760