PT-2015-7281 · Phpliteadmin · Phpliteadmin

Published 2015-08-18 · Updated 2019-03-12 · CVE-2015-6517

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack user authentication for requests, specifically to drop database tables via the droptable parameter to the "phpliteadmin.php" endpoint.

Recommendations For phpLiteAdmin version 1.1, consider disabling access to the "phpliteadmin.php" endpoint until a patch is available, or restrict the use of the droptable parameter to prevent unauthorized database modifications.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-6517

Affected Products

Phpliteadmin

References · 4

• 🔥 http://securityfocus.com/archive/1/535936/100/0/threaded · Exploit
• 🔥 https://exploit-db.com/exploits/37515 · Exploit
• 🔥 http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6517 · Security Note