Lucene search

K
nvd[email protected]NVD:CVE-2015-6517
HistoryAug 18, 2015 - 6:00 p.m.

CVE-2015-6517

2015-08-1818:00:23
CWE-352
web.nvd.nist.gov
2

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.007

Percentile

81.0%

Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php.

Affected configurations

Nvd
Node
phpliteadmin_projectphpliteadminMatch1.1
VendorProductVersionCPE
phpliteadmin_projectphpliteadmin1.1cpe:2.3:a:phpliteadmin_project:phpliteadmin:1.1:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.007

Percentile

81.0%