Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29651
Various Sources x_refsource_misc
http://www.mrzayas.es/2008/04/07/xsrf-en-nuke-et-3x/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41851
Scores
EPSS
0.0056
EPSS Percentile
42.9%
Details
CWE
CWE-352
Status
published
Products (2)
truzone/nuke_et
3.2
truzone/nuke_et
3.4
Published
Apr 10, 2008
Tracked Since
Feb 18, 2026