CVE:CVE-2012-4877
CNNVD:CNNVD-201204-037
FlatnuX CMS 2011 08.09.2和较早版本中的controlcenter.php中存在跨站请求伪造(CSRF)漏洞。远程攻击者可利用该漏洞劫持管理员验证添加用户账户的请求。
solution:Upgrade flatnux flatnux to a higher version than 2011-08-09-2,2008-12-11,2009-01-27,2009-02-04,and avoid the version (,2011-08-09-2],2008-12-11,2009-01-27,2009-02-04