Cross site request forgery (csrf)

2015-08-2221:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.3%

JSON

Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users.

CPENameOperatorVersion
photo_gallery_cms_freeeq1.0.1
photo_gallery_cms_freeeq1.0.0

CPE	Name	Operator	Version
	photo_gallery_cms_free	eq	1.0.1
	photo_gallery_cms_free	eq	1.0.0

References

jvn.jp/en/jp/JVN78240242/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000114

www.php-factory.net/trivia/16.php