CVE-2007-5918

Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current…

published November 10, 2007

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change arbitrary accounts or change the SiteTitleName field as an arbitrary user via a modified uname value in an edit action to modules.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.6th percentile
Published
2007-11-10T02:00Z
EPSS history
Timeline
  • 10 NOV 02:00Z
    Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current…
    cvelistv5