CVE-2015-5660

EUVD-2015-5610
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
extplorerextplorer
𝑥
≤ 2.1.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
extplorer
precise
ignored
trusty
Fixed 2.1.0b6+dfsg.3-4+deb7u3build0.14.04.1
released
vivid
ignored
wily
Fixed 2.1.0b6+dfsg.3-4+deb7u3build0.15.10.1
released
xenial
Fixed 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1
released
yakkety
dne
zesty
dne
Common Weakness Enumeration
References
http://extplorer.net/news/18
http://jvn.jp/en/jp/JVN92520335/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000126
http://extplorer.net/news/18
http://jvn.jp/en/jp/JVN92520335/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000126