6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
References
Link | Resource |
---|---|
https://cxsecurity.com/issue/WLB-2015040034 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2019-08-08 14:15
Updated : 2019-08-15 07:44
NVD link : CVE-2015-9292
Mitre link : CVE-2015-9292
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
6kbbs
- 6kbbs