CVEvulnerability
CVE-2015-2983
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users.
Affected configurations
• php kobo photo gallery cms free 1.0.0
• php kobo photo gallery cms free 1.0.1
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://jvn.jp/en/jp/JVN78240242/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000114 Vendor Advisory
- http://www.php-factory.net/trivia/16.php Vendor Advisory
- http://jvn.jp/en/jp/JVN78240242/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000114 Vendor Advisory
- http://www.php-factory.net/trivia/16.php Vendor Advisory