CVE-2012-0699

8.8 highEPSS 3.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2018-01-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

haudenschilt:family_connections_cms

References

http://www.exploit-db.com/exploits/18667
http://www.exploit-db.com/exploits/18667

Check your stack JSON