CVE-2012-1416

CVE-2012-1416 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in SocialCMS 1.0.2. These flaws allow remote attackers to hijack authenticated administrator sessions to either create new administrator accounts or modify the site's default title. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring user interaction (AC:M) but not authentication (Au:N). Successful exploitation could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). While not listed on the CISA KEV catalog, public exploit code is available on ExploitDB. There is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.