CVE-2007-1520: CSRF
Published Mar 20, 2007
·Updated
The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTPREFERER, which allows remote attackers to conduct CSRF attacks.
Affected Software
13 affected components
Phpnuke Php-nuke<=8.0
Phpnuke Php-nuke=5.6
Phpnuke Php-nuke=6.5
Phpnuke Php-nuke=7.0
Phpnuke Php-nuke=7.1
Phpnuke Php-nuke=7.2
Phpnuke Php-nuke=7.3
Phpnuke Php-nuke=7.4
Phpnuke Php-nuke=7.5
Phpnuke Php-nuke=7.6
Phpnuke Php-nuke=7.7
Phpnuke Php-nuke=7.8
Phpnuke Php-nuke=7.9
Event History
Mar 20, 2007
CVE Published
08:19 PM
Mar 21, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1520?
CVE-2007-1520 is considered a high severity vulnerability due to its potential for CSRF attacks.
2
How do I fix CVE-2007-1520?
To fix CVE-2007-1520, upgrade PHP-Nuke to a version later than 8.0 to ensure proper CSRF protection.
3
What versions are affected by CVE-2007-1520?
CVE-2007-1520 affects PHP-Nuke versions 8.0 and earlier.
4
What type of vulnerability is CVE-2007-1520?
CVE-2007-1520 is a cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2007-1520 be exploited remotely?
Yes, CVE-2007-1520 can be exploited remotely by attackers to perform CSRF attacks.