CVE-2012-4877

CVE-2012-4877 describes a Cross-Site Request Forgery (CSRF) vulnerability in FlatnuX CMS versions 2011 08.09.2 and earlier, specifically within the controlcenter.php component. This flaw allows remote attackers to hijack an administrator's authenticated session to add new user accounts. With a CVSS score of 6.8 (Medium), the vulnerability has a network attack vector and medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.