Skip to content

CVE-2012-4773

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow...

6.8 MediumPublic exploit

CVE-2012-4773 is a medium vulnerability (CVSS 6.8) in Intelliants Subrion Cms, published October 22, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. No source names a fixed version.

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.

Exploit likelihood

3.49%Down 10.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.

Record: CVE-2012-4773
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.

Record: CVE-2012-4773
Updated: 2026-11-02

EUVDEUVD-2012-4698 No score

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.

Record: EUVD-2012-4698
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q5wp-hv3f-jvh6 No score

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow...

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.

Record: GHSA-q5wp-hv3f-jvh6
Weakness: CWE-352
Updated: 2026-11-02

Affected products

intelliants subrion cms

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Subrion CMS 2.2.1 - Cross-Site Request Forgery (Add Admin)	2012-09-12
Exploit-DB	subrion CMS 2.2.1 - Multiple Vulnerabilities	2012-10-22

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References

Show 6 moreShow less