CVE-2015-7715

High

Published: 18/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before version 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an add_user action to administrator/index.php.

Risk Assessment

This vulnerability could lead to unauthorized user additions by attackers, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to update the Realtyna RPL component to version 8.9.5 or later to mitigate this vulnerability and implement additional safeguards against CSRF attacks.

Other vulnerabilities in Realtyna RPL (com_rpl)

CVE-2015-7714High
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before version 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via various parameters in administrator/index.php.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an add_user action to administrator/index.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS