CVE-2012-4902

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.32%

Published

May 20, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBTemplate CMS 2.1.1 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.

Weaknesses (CWE)

CWE-352

Affected Products (1)

template_cms_project · template_cmsvulnerable

References (8)

http://osvdb.org/85896

http://www.securityfocus.com/bid/55766

https://www.exploit-db.com/exploits/21742/

https://www.htbridge.com/advisory/HTB23115

Exploit

http://osvdb.org/85896

http://www.securityfocus.com/bid/55766

https://www.exploit-db.com/exploits/21742/

https://www.htbridge.com/advisory/HTB23115

Exploit

KEV Catalog EPSS Scores Vendors All CVEs