Analyst readout for executives and security teams
Plain-English summary
This CVE describes a CSRF flaw in DiY-CMS 1.0. If an administrator is already logged in and can be tricked into making a malicious web request, an attacker could cause the CMS to create a poll without the administrator intending it.
Executive priority
Treat this as a targeted legacy-web risk, not a broad emergency. Prioritize remediation if DiY-CMS 1.0 is internet-facing, business-critical, or still used by administrators.
Technical view
The issue is in mod.php in DiY-CMS 1.0. The vulnerable flow is an add action in the poll module. The CVE record describes authentication hijacking of administrator requests, specifically to create a poll. No CVSS score or vendor fix is provided in the supplied sources.
Likely exposure
Exposure appears limited to organizations still running DiY-CMS 1.0 with administrator sessions reachable through a browser. Evidence for affected versions beyond DiY-CMS 1.0 is not provided.
Exploitation context
Public exploit and advisory references exist, but the source bundle does not show CISA KEV listing or current active exploitation. Successful abuse requires an authenticated administrator to submit an unintended request, typically through social engineering or a malicious page.
Researcher notes
The supplied data is sparse: no CVSS, CWE, patch, or maintained affected-product metadata. Keep analysis scoped to DiY-CMS 1.0 and the poll creation CSRF path. Do not infer broader admin compromise without supporting evidence.
Mitigation direction
- Identify and retire any DiY-CMS 1.0 deployments.
- Check original vendor or advisory guidance for any available fix.
- Restrict CMS admin access to trusted networks or VPN.
- Use strong CSRF protections on administrator state-changing actions.
- Log and review unexpected poll creation or admin changes.
Validation and detection
- Search asset inventory for DiY-CMS 1.0 instances.
- Confirm whether mod.php and the poll module are present.
- Review admin routes for CSRF tokens on state-changing requests.
- Check web logs for unexpected poll add actions.
- Verify admin interfaces are not publicly reachable.
Public sources used
Based on public source material and reviewed before publication.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2012-6518 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- 18804CVE reference · exploit, x_refsource_EXPLOIT-DB
- 20120426 DIY CMS v1.0 Poll - Multiple Web VulnerabilitiesCVE reference · mailing-list, x_refsource_BUGTRAQ
- 53266CVE reference · vdb-entry, x_refsource_BID
- diycms-modfile-csrf(75230)CVE reference · vdb-entry, x_refsource_XF
- 49011CVE reference · third-party-advisory, x_refsource_SECUNIA
- 81562CVE reference · vdb-entry, x_refsource_OSVDB
- http://www.vulnerability-lab.com/get_content.php?id=518CVE reference · x_refsource_MISC
- http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.