CVE-2015-1583

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:atutor:atutor:2.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-03-02 16:15

Updated : 2024-02-28 17:28


NVD link : CVE-2015-1583

Mitre link : CVE-2015-1583

CVE.ORG link : CVE-2015-1583


JSON object : View

Products Affected

atutor

  • atutor
CWE
CWE-352

Cross-Site Request Forgery (CSRF)