Lucene search
HistoryAug 31, 2015 - 7:59 p.m.
CVE-2015-6655
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
64.5%
Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/admin_users.php.
Affected configurations
Node
pliggpligg_cmsMatch2.0.2
Related
exploitdb
exploitdb
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
2015-08-24 00:00:00
cve
cve
CVE-2015-6655
2015-08-31 19:59:00
checkpoint_advisories
checkpoint_advisories
Pligg CMS Cross Site Request Forgery (CVE-2015-6655)
2020-12-21 00:00:00
prion
prion
Cross site request forgery (csrf)
2015-08-31 19:59:00
packetstorm
packetstorm
Pligg CMS 2.0.2 Cross Site Request Forgery
2015-08-25 00:00:00
zdt
zdt
Pligg CMS 2.0.2 - CSRF Add Admin Exploit
2015-08-25 00:00:00
exploitpack
exploitpack
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
2015-08-24 00:00:00
cvelist
cvelist
CVE-2015-6655
2015-08-31 19:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
64.5%
Related for NVD:CVE-2015-6655