VULNERABILITY INTELLIGENCE

CVE-2011-0535

CVSS score6.8 MEDIUM
EPSS probability1.43%
CISA KEVNot currently listed
Published2011-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to index.php.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references