CSRF in Phpliteadmin Project

CVE-2015-6517

Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Phpliteadmin_project Phpliteadmin — versions 1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)