medium6.8Public exploit code
CVE-2012-4325
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentica…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)2012-04-08 · webapps · php · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Utopiasoftware | News Pro | through 1.4.0 |