Read the docs

Ms Topsites

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ms Topsites records in CISA KEV

No Ms Topsites vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 28

Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change a…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00784 Published 2007-11-10 No fix listed CWE-352
Open these records in search →