PT-2015-7281 · Phpliteadmin · Phpliteadmin

Publicado 2015-08-18 · Atualizado 2019-03-12 · CVE-2015-6517

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack user authentication for requests, specifically to drop database tables via the droptable parameter to the "phpliteadmin.php" endpoint.

Recommendations For phpLiteAdmin version 1.1, consider disabling access to the "phpliteadmin.php" endpoint until a patch is available, or restrict the use of the droptable parameter to prevent unauthorized database modifications.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-6517

Produtos afetados

Phpliteadmin

Referências · 4

• 🔥 http://securityfocus.com/archive/1/535936/100/0/threaded · Exploit
• 🔥 https://exploit-db.com/exploits/37515 · Exploit
• 🔥 http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6517 · Nota de Segurança