CVE-2007-5032: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

Affected products

• Francisco Burzi PHP-Nuke: up to and including 1.0; up to and including 2.5; up to and including 3.0; up to and including 4.0; up to and including 4.0.4; up to and including 4.3; …

Published 2007-09-21. Last modified 2026-06-16.