CVE-2015-6517

Опубликовано: 18 авг. 2015

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php.

Ссылки

http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/535936/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/535936/100/0/threaded
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpliteadmin_project:phpliteadmin:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.003

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2015-6517

debian

больше 10 лет назад

Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 al ...

GHSA-vjxr-w794-jqm7

github

больше 3 лет назад