packetstormsecurity.com
http://packetstormsecurity.com/files/133299/Pligg-CMS-2.0.2-Cross-Site-Request-Forgery.html CVE-2015-6655
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
Record summary
CVE-2015-6655 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/admin_users.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)ExploitDB exploitby Arash KhazaeiNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-6655 37955exploit
https://www.exploit-db.com/exploits/37955