Unscored CVE-2007-5032 EUVD-2007-5013GHSA-p95c-gxm3-3qc4

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative acco…

Published Sep 21, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

References

20070920 PHP-Nuke add admin ALL Versions mailing-list
3157 third-party-advisory
42521 vdb-entry