5 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...
CVE-2015-6518: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...
CVE-2015-6517: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...
PT-2015-7282
Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the PATH INFO, the...
PT-2015-7281
Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests, specifically to drop database tables via the droptable parameter to the "phpliteadmin.php" endpoin...