CVE-2015-9292 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
HighCVSS 8.8
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 6kbbs | = 7.1 | No fix listed |
| 6kbbs | = 8.0 | No fix listed |
References
- cxsecurity.com exploit third-party-advisory