CVE-2006-3479: Nuked-Klan

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a del_block op on the block page in index.php.

Affected products

• Nuked-Klan Nuked-Klan: up to and including 1.7.5; version 1.7_sp4.2 only

Published 2006-07-10. Last modified 2026-06-16.