CVE-2012-1901

no score yetEPSS 1.2%

flexcms flexcms: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or (2) hijack the authentication of administrators for requests that add a new page via a request to admin/pages-new-save.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-09-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

flexcms:flexcms

References

http://ivanobinetti.blogspot.com/2012/03/flexcms-multiple-csrf-vulnerabilities.html
http://secunia.com/advisories/48451
http://www.exploit-db.com/exploits/18609
http://ivanobinetti.blogspot.com/2012/03/flexcms-multiple-csrf-vulnerabilities.html
http://secunia.com/advisories/48451

Check your stack JSON