Lucene search
MitreCVE-2015-1374HistoryJan 27, 2015 - 8:04 p.m.
CVE-2015-1374
2015-01-2720:04:32
CWE-352
mitre
web.nvd.nist.gov
24
csrf
cross-site scripting
xss
sql injection
unrestricted file upload
admin authentication
vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.002
Percentile
51.8%
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct (1) cross-site scripting (XSS), (2) SQL injection, or (3) unrestricted file upload attacks.
Affected configurations
Node
ferretcms_projectferretcmsMatch1.0.4alpha
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ferretcms_project | ferretcms | 1.0.4 | cpe:2.3:a:ferretcms_project:ferretcms:1.0.4:alpha:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2015-1374
2015-01-27 20:04:32
prion
prion
Cross site request forgery (csrf)
2015-01-27 20:04:00
cvelist
cvelist
CVE-2015-1374
2015-01-27 17:00:00
exploitdb
exploitdb
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
2015-01-26 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.002
Percentile
51.8%
Related for CVE-2015-1374