CVE-2015-2143

High

Published: 06/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before version 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters.

Risk Assessment

Attackers can exploit these vulnerabilities to hijack user sessions, potentially leading to unauthorized access to application data or functions.

Recommendation

It is recommended to upgrade to phpBugTracker version 1.7.0 or later to mitigate these CSRF vulnerabilities.

Other vulnerabilities in Issuetracker phpBugTracker

CVE-2015-2147Critical
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before version 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.

Original NVD description (English source)

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters.