Back to feed
EUVD-2006-3474 · Published Jul 10, 2006
Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a del_block op on the block page in index.php.
Technologies
Nuked-Klan Nuked-Klan
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.05.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
