CVE-2012-4877

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2...

6.8 MediumPublic exploit

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.

Exploit likelihood

1.18%Down 7.4 points since Feb 4, 2022

What each source reports

NVD Score used6.8

Record: CVE-2012-4877
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2012-4877
Updated: 2026-11-02

EUVDEUVD-2012-4802No score

Record: EUVD-2012-4802
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r464-5gc2-5fccNo score

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2...

Record: GHSA-r464-5gc2-5fcc
Weakness: CWE-352
Updated: 2026-11-02

Affected products

flatnux

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	FlatnuX CMS - Cross-Site Request Forgery (Add Admin)	2012-04-01

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4877 is a medium vulnerability (CVSS 6.8) in Flatnux, published September 6, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 68th percentile. No source names a fixed version.