CVE-2015-5660

Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
extplorerextplorer
𝑥
≤ 2.1.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
extplorer
zesty
dne
yakkety
dne
xenial
Fixed 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1
released
wily
Fixed 2.1.0b6+dfsg.3-4+deb7u3build0.15.10.1
released
vivid
ignored
trusty
Fixed 2.1.0b6+dfsg.3-4+deb7u3build0.14.04.1
released
precise
ignored