CVE-2007-5032: CSRF
Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified addname and addradminsuper parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5032?
CVE-2007-5032 is classified as a medium-severity vulnerability due to its potential to allow unauthorized administrative account creation.
How do I fix CVE-2007-5032?
To fix CVE-2007-5032, update PHP-Nuke to a version that has patched the CSRF vulnerability.
What type of attack does CVE-2007-5032 enable?
CVE-2007-5032 enables a cross-site request forgery (CSRF) attack that allows attackers to gain unauthorized administrative access.
Can all versions of PHP-Nuke be affected by CVE-2007-5032?
Yes, CVE-2007-5032 affects multiple versions of PHP-Nuke up to version 8.0_final, as it exploits the vulnerabilities present in those versions.
What parameters are exploited in CVE-2007-5032?
CVE-2007-5032 specifically exploits the add_name and add_radminsuper parameters in the admin.php file.