high8.8Public exploit code
CVE-2012-0699
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentica…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Family CMS 2.9 - Multiple Vulnerabilities2012-03-26 · webapps · php · Verified
- Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities2011-12-10 · webapps · php · Verified
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haudenschilt | Family Connections Cms | through 2.9.0 |