CVE-2015-5534

MEDIO 6.8CVE-2015-5534 · Published 02/11/2015 · updated 17/06/2026

In breve

CVE-2015-5534 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda oxwall (oxwall).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.3%, superiore al 83.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
oxwall oxwall	`≤ 1.7.4`	No fix yet

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the authentication of administrators for requests that (1) put the website under maintenance via the maintenance_enable parameter or (2) conduct cross-site scripting (XSS) attacks via the maintenance_text parameter to admin/pages/maintenance.

References

packetstormsecurity.com/files/134124/Oxwall-1.7.4-Cross-Site-Request-Forgery.html · Exploit
securityfocus.com/archive/1/536784/100/0/threaded
exploit-db.com/exploits/38581
htbridge.com/advisory/HTB23266 · Exploit

Altre vulnerabilità di oxwall

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free