PT-2017-6547 · Phpbugtracker · Phpbugtracker

Published 2017-10-06 · Updated 2017-10-11 · CVE-2015-2143

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBugTracker versions prior to 1.7.0

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of users for requests, causing an unspecified impact. The attack is carried out via unknown parameters.

Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-2143

Affected Products

Phpbugtracker

References · 3

• 🔥 https://exploit-db.com/exploits/36160 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2143 · Security Note
• http://openwall.com/lists/oss-security/2015/02/28/1 · Note