VULNERABILITY INTELLIGENCE

CVE-2012-0699

CVSS score8.8 HIGH
EPSS probability3.57%
CISA KEVNot currently listed
Published2018-01-11
Last modified2026-06-16
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references