CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1498

Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via an add action to admin/users/add or (2) modify a web page via a save action to admin/pages/edit/web_page_name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.033

EPSS Ranking 86.8%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2012-1498

Nikola Posa » Webfoliocms1.0.2 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.2:-
Nikola Posa » Webfoliocms1.0.3 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.3:-
Nikola Posa » Webfoliocms1.0.4 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.4:-
Nikola Posa » Webfoliocms1.0.5 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.5:-
Nikola Posa » Webfoliocms1.0.6 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.6:-
Nikola Posa » Webfoliocms1.0.7 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.7:-
Nikola Posa » Webfoliocms1.0.8 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.8:-
Nikola Posa » Webfoliocms1.0.9 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.0.9:-
Nikola Posa » Webfoliocms1.1.0 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.1.0:-
Nikola Posa » Webfoliocms1.1.1 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.1.1:-
Nikola Posa » Webfoliocms1.1.2 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.1.2:-
Nikola Posa » Webfoliocms1.1.3 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.1.3:-
Nikola Posa » Webfoliocms1.1.4 » Version: N/A

cpe:2.3:a:nikola_posa:webfoliocms1.1.4:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1498

Products

Pricing

Contact Us