CVE-2015-6827

Auto-exchanger - CSRF

Title source: rule

Description

Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php.

Exploits (1)

exploitdb WORKING POC
by Aryan Bayaninejad · htmlwebappsphp
https://www.exploit-db.com/exploits/38119

References (2)

Scores

EPSS 0.0022
EPSS Percentile 44.4%

Details

CWE
CWE-352
Status published
Products (1)
auto-exchanger/auto-exchanger 5.1.0
Published Sep 11, 2015
Tracked Since Feb 18, 2026