CVE-2012-4902 in Template CMS
Zusammenfassung
von MITRE
Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.
If you want to get best quality of vulnerability data, you may have to visit VulDB.