CVE-2012-4877
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2...
CVE-2012-4877 is a medium vulnerability (CVSS 6.8) in Flatnux, published September 6, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
Exploit likelihood
What each source reports
NVD Score used
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
- Record
CVE-2012-4877- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
- Record
CVE-2012-4877- Updated
- 2026-11-02
EUVDEUVD-2012-4802 No score
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
- Record
EUVD-2012-4802- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r464-5gc2-5fcc No score
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2...
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
- Record
GHSA-r464-5gc2-5fcc- Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | FlatnuX CMS - Cross-Site Request Forgery (Add Admin) | 2012-04-01 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html
osvdb.org/80878
exchange.xforce.ibmcloud.com/vulnerabilities/74567
secunia.com/advisories/48656
securityfocus.com/bid/52846
vulnerability-lab.com/get_content.php?id=487
nvd.nist.gov/vuln/detail/CVE-2012-4877
github.com/advisories/GHSA-r464-5gc2-5fcc