CVE

Id
84242  
CVE No.
CVE-2015-6965  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) create a field, (2) update a field, (3) delete a field, (4) create a form, (5) update a form, (6) delete a form, (7) create a template, (8) update a template, (9) delete a template, or (10) conduct cross-site scripting (XSS) attacks via a crafted request to the cfg_forms page in wp-admin/admin.php.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
746718 84242 CVE-2015-6965 EXPLOIT-DB:38086  View
746719 84242 CVE-2015-6965 URL:https://www.exploit-db.com/exploits/38086/  View
746720 84242 CVE-2015-6965 MISC:http://packetstormsecurity.com/files/133463/WordPress-Contact-Form-Generator-2.0.1-CSRF.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10215 JVNDB-2015-005535 Apple iOS などの CoreText における任意のコードを実行される脆弱性 Apple iOS、OS X、および iTunes には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-7017 84242 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005535.html  View