CVE-2011-0642

MEDIUM 4.3CVE-2011-0642 · Published 25/01/2011 · updated 16/06/2026

In short

CVE-2011-0642 is a MEDIUM (CVSS 4.3) vulnerability affecting n-13 news (network-13).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
n-13 news network-13	`= 3.4= 3.7= 4.0`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information.

References

osvdb.org/70593
secunia.com/advisories/42959 · Vendor Advisory
exploit-db.com/exploits/16013 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/64824

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free