CVE-2015-6517 Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to....
MediumCVSS 6.8
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpliteadmin project phpliteadmin | = 1.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-6517 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150705 phpLiteAdmin v1.1 CSRF & XSS Vulnerabilities exploit mailing-list third-party-advisory vdb-entry