What’s Vulnerable › Vulnerabilities

CVE-2012-4902

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-05-20 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.

Affected products

• Template Cms Project Template Cms: through 2.1.1

References

• http://osvdb.org/85896
• http://www.securityfocus.com/bid/55766
• https://www.exploit-db.com/exploits/21742/
• https://www.htbridge.com/advisory/HTB23115
• http://osvdb.org/85896
• http://www.securityfocus.com/bid/55766
• https://www.exploit-db.com/exploits/21742/
• https://www.htbridge.com/advisory/HTB23115

Get alerted when CVE-2012-4902 or the next vulnerability affects your stack