Vulnerabilities > CVE-2006-3479 - Cross-Site Request Forgery vulnerability in Nuked-Klan 1.7Sp4.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a del_block op on the block page in index.php. Upgrade to Nuked-Klan version 1.7.6 or 1.7 SP4.3
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |