« Volver al listado

CVE-2012-6047

Estado: ModificadaMedia (6.8)—

Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

X7 Group — X7 Chat

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6047",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-11-27T04:49:26.660",
  "references": [
    {
      "url": "http://www.exploit-db.com/exploits/18850",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/18850",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de falsificación de peticiones en sitios cruzados (CSRF) en X7 Chat v2.0.5.1 y anteriores, permite a atacantes remotos secuestrar la autenticación de administradores en peticiones que añaden un usuario a un grupo arbitrario a través de la página de usuarios en una acción adminpanel a index.php."
    }
  ],
  "lastModified": "2026-06-16T23:47:43.267",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F0ADC73-F03E-42AC-965D-70BB9F7B6095",
              "versionEndIncluding": "2.0.5.1"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.0.0b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEC03F78-787D-40D4-991D-FB9BA3AA755E"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.1.1b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "377CCD11-EDF4-4906-BA22-343C79AEE922"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.1.2b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAF439C9-889B-41A4-B7AC-1A6AFBBCB81D"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.2.0b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "028EB15D-DCCA-4EA9-9BB0-44AFCBF29CA2"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.0b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47A9F90B-3FDD-4CEC-882B-EC9657072F30"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.1b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "380114DD-09AD-4A2E-A58A-98C91373FDCB"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.2b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3ADC9B27-A222-496B-B86E-093ED42DE291"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.3b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7118CE2-E745-4DC4-BE17-2C1A135E263D"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.4b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58CB6A44-823A-4AA7-9F56-5344D8B4E8D1"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.5b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17916C46-6B28-4707-8FC0-6F1ADCBEEB5B"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:1.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEA6CF17-AEDE-45DD-8289-DDFA5E782F0D"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7B55245-6E89-4518-9235-C58420695C51"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E0B3DAA-5189-4604-9CBE-E0FE6C751513"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F4C7957-B103-4949-AA63-A645CEDB87BE"
            },
            {
              "criteria": "cpe:2.3:a:x7_group:x7_chat:2.0.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECAB6B8E-BF7F-443A-9A59-F4131E33ADB9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}