{"api_version":"1","generated_at":"2026-07-23T02:54:09+00:00","cve":"CVE-2012-1297","urls":{"html":"https://cve.report/CVE-2012-1297","api":"https://cve.report/api/cve/CVE-2012-1297.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-1297","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-1297"},"summary":{"title":"CVE-2012-1297","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module.","state":"PUBLISHED","assigner":"mitre","published_at":"2012-03-19 18:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.exploit-db.com/exploits/18527","name":"http://www.exploit-db.com/exploits/18527","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/48180","name":"http://secunia.com/advisories/48180","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html","name":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ivano Binetti: ContaoCMS (fka TYPOlight) 2.11  CSRF (Delete Admin- Delete Article)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73479","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html","name":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"ContaoCMS 2.11.0 Cross Site Request Forgery ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1297","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1297","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"1297","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.0","cpe7":"beta-rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.0","cpe7":"beta-rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.0","cpe7":"beta-rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.10.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.0","cpe7":"beta-rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.7.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.8.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.0","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"2.9.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"1297","vulnerable":"1","versionEndIncluding":"2.11.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao_cms","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T18:53:37.174Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"18527","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/18527"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html"},{"name":"contao-newsletter-csrf(73479)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73479"},{"name":"48180","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/48180"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-02-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"18527","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/18527"},{"tags":["x_refsource_MISC"],"url":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html"},{"name":"contao-newsletter-csrf(73479)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73479"},{"name":"48180","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/48180"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-1297","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"18527","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/18527"},{"name":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html","refsource":"MISC","url":"http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html"},{"name":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html","refsource":"MISC","url":"http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html"},{"name":"contao-newsletter-csrf(73479)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73479"},{"name":"48180","refsource":"SECUNIA","url":"http://secunia.com/advisories/48180"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-1297","datePublished":"2012-03-19T18:00:00.000Z","dateReserved":"2012-02-27T00:00:00.000Z","dateUpdated":"2024-08-06T18:53:37.174Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-03-19 18:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.0","matchCriteriaId":"C9F688AE-1EB4-4013-A8EC-4612166D4770"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E1F6555-C853-40A8-8935-7BD275DC610E"},{"vulnerable":false,"criteria":"cpe:2.3:a:contao:contao_cms:2.0:beta-rc1:*:*:*:*:*:*","matchCriteriaId":"E210735D-9933-4F57-B9F8-32FC5673F115"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.0:beta-rc2:*:*:*:*:*:*","matchCriteriaId":"40849DFD-C3E2-4283-A543-85B3435E9478"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.0:beta-rc3:*:*:*:*:*:*","matchCriteriaId":"3513D755-3E0B-4997-A0FC-1A397C4BB393"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E39F68B-98F8-411A-A805-6ECB7BA1F124"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E227A1DB-AD06-4379-8FB8-27563FB135DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B7710DFC-1A70-4C0C-BD78-673C6386FC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D8025EA3-434E-4BAC-BBEE-C4BA62A5E090"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F302D73B-9529-4A39-8681-18707FCBEFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5D0AFA4A-20AF-4BB5-AF4C-969293A5ED36"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C906FF5E-9D05-4D3A-A4A2-86662354D5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E109C9DE-BD05-4554-B2DA-5A3CAE9FC02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"6334C150-BAED-4F30-BB49-3998EC7123DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"CB1C6C6D-6007-485D-A65E-C93FD019C10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"2498A85B-D23E-4821-A23A-D91D2D4C942E"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"C6CA97EE-C2F3-4D8C-B1FA-C62B238D0A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"150C302F-BE3B-4C4F-BA82-DDCD06311C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.13:*:*:*:*:*:*:*","matchCriteriaId":"963D5D8E-ED92-476F-A3B4-9F7C9834D487"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.14:*:*:*:*:*:*:*","matchCriteriaId":"DF7838C9-BB5E-4A12-AF93-9C59D2E165F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.15:*:*:*:*:*:*:*","matchCriteriaId":"2A53EE4A-E26E-47EC-8BDD-B1556142FA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"532BEF96-0717-4086-9D97-B4306E816D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DBC5564D-6430-4DB7-B9F2-387F9859F23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.18:*:*:*:*:*:*:*","matchCriteriaId":"BB7043C6-9744-4299-8EE1-917F6961E155"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A8BD438B-73AB-43A3-B1A8-764BD389A514"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.1.20:*:*:*:*:*:*:*","matchCriteriaId":"B7F1B75E-945D-4A8D-BD36-A6932F640C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F14AC319-F390-45CE-850E-C62B93855C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D7418CE4-3A95-47AC-86AB-4798C576FBF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0D3D968-2959-4CAA-807E-92E5E754E2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0F01BAF8-5DDD-4D07-B44B-98E9DDA763A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B5B777A-0808-4FCC-BC3A-4439F06133C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A02D03D7-6424-4196-9910-7CF55B5DDB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E417DAC1-DAC8-4B9D-9A8B-9ECA97D02CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F644DEDE-DC3A-4BCA-B47D-5ECE9D1D16F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2C4D0369-0FC5-42E0-A314-3D95EA3A1BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C84259B3-FA0D-43AB-93F6-B56E39C16C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"1E7259D5-B95A-4776-BCC6-0EA728BAD8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"571B4326-534A-4F13-917A-E70B189B48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A858A058-6C6F-4A55-8F75-7B5C4864FD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"66DAB15B-7C53-4F60-AB74-B447ACC89C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"41D6B294-FC56-4F67-BDDC-D2BD843E7A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0C5F21EE-0EF8-426B-88B6-2B8DAA29D2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3904DED0-9772-423D-B705-CC2DC622979E"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E4ACD0CD-4E4B-4133-812A-69CF2221504E"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D828A2C-DA93-4CA9-AA4F-1B981FB42170"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.0:beta:*:*:*:*:*:*","matchCriteriaId":"18FD90D0-0D81-4AA6-A0C6-FF5A0D612B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E3F87637-DD29-4F9D-9069-10DF72F893F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"539D1C67-4486-4278-A10F-4E47A1B6214A"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8FC54491-D847-49F4-8477-C7223FEFDED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"DBA47797-CC87-4540-9988-EFB25416CBE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0D3AD5-753F-4089-8F16-99A4E79717A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2D75366F-5976-4088-9973-ADA2B826EAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"CFABCCAE-0BE7-480E-B1EC-D5E8F991BE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"ADC7A261-780D-41D4-9F61-80E7474C0247"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"8A170F03-D582-405C-8B22-2E3405989B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.0:beta-rc2:*:*:*:*:*:*","matchCriteriaId":"F37147E6-795B-4C4B-AE9E-458D45272ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2D150167-00AC-416C-88C7-C901E80B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"22CA6235-6D32-4C84-BF29-D8432F8403D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3852AB7E-2CF7-42A5-80F9-D921FA311359"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2FCCF09E-899D-4BDD-87F7-7D0866EDC06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4A296368-5FFE-4037-A58E-FBC24783B7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E497999A-ACE7-47BC-A0C7-8F6A2CE25EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E841B29E-628A-4E77-AB59-32C222973252"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"C503BE53-AC21-4381-85B2-A9F73B0F68F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"93ABE05F-92E2-40FE-858A-D15B98B0677B"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E276325C-5B69-4A4B-B6ED-CEDB8D93AB0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.0:beta:*:*:*:*:*:*","matchCriteriaId":"C8F7C378-3908-4151-BE03-2A8180A8FBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"73844A9B-C6A0-4B5C-9A17-883A0624E30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BC882715-1899-4AA2-85B7-082BFD186AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"BC53C9EC-04D1-4C69-A6FC-C03E7CEB2A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"401C9B5D-2789-4F20-9F69-763EB9428C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"35AE8028-3B12-49FB-BCB4-F6F4614A7582"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"1BBDC8B4-88C6-4F90-8F98-B28C381598AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"10C0B8CB-B290-43C9-96ED-F3401F556339"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"3DB45B3B-C7FE-4B02-A7D4-F7DDAF988D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"E34758B1-BDAC-4277-A141-E54792414D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"711FA883-8573-4D82-8ABB-6CF57A375CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7EE97438-13F6-48A4-83FB-4B5A0953F5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6F6C1E95-ACA1-467C-B83C-D181A5C2E7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C10EFA4D-BC0A-47DA-BBF6-7CC7A71ABC62"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBAA823-61A6-4A63-B348-5358152E02FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"F8432155-FC1D-454B-AADE-91845E4D4170"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D0A4BA44-4C22-448B-BB57-3B150309E7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"4FEFFCF5-60B3-4299-842C-736B5A0A9E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"0175BDCC-B3A5-48A7-AE77-AE9BBFCB292F"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"965280FF-E31E-4027-81AF-984DBB2D20C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C3DD8B58-4D71-4E24-A3BB-15FF14AC1ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2B900603-6D38-4602-94B4-6DB37BF0FC16"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C3FA521A-6593-4A5B-A582-3E9DA804C973"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"16C95AAB-A346-43BE-B2ED-6D52835EDA2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A7D0F246-7839-4DD7-A73F-64AD1CFCB643"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4DA67F43-1CC3-42B1-84CB-6FD458B6EC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"018A50A3-E79C-4CDF-9AAD-60CB97A5141B"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"0ACCC146-D248-4199-9C60-B9499586C3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A762BEF8-C457-423C-A3A6-8ED49E503F8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CC962AF4-4FA6-421A-8F9B-B425E1E48E0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"4D8973E6-02D9-4EDC-92FD-C8789851CE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"5948A9DB-8CD3-4AB6-BAD4-B1341F4E3C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"4D99A88B-01CD-4AED-9FF5-31DBE0513E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"EA9D573F-4426-4608-A1AB-DD169EC83CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"47F48DCD-9AB8-4FD0-90B7-5CA8C54ED97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.:beta:*:*:*:*:*:*","matchCriteriaId":"83FD5A80-5D26-4182-AB2A-F64AB057DECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"6D359463-9BC3-451C-8576-2FEFC3123CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BEBDD36E-D29F-4D95-81C9-4F51D8F47364"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"456B642C-4F5E-49E8-91F3-ADE504EBA668"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"133A3AFA-8721-4712-9DF5-19A5C53B61EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"384DE25B-E28D-4C49-9244-5D0725B7A6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:contao:contao_cms:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"59DC8CCA-C561-4E10-AD19-F817E711C06E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"1297","Ordinal":"1","Title":"CVE-2012-1297","CVE":"CVE-2012-1297","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"1297","Ordinal":"1","NoteData":"Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module.","Type":"Description","Title":"CVE-2012-1297"},{"CveYear":"2012","CveId":"1297","Ordinal":"2","NoteData":"2012-03-19","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"1297","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}