CVE Reference
- Id
- 718941
- CVE No.
- CVE-2015-1559
- Reference
- URL:http://seclists.org/fulldisclosure/2015/Feb/30
-
- History
- Session
-
Request +
Request
Cake Params
- plugin(null)
- controllercvereves
- actionview
- named(empty)
- pass(array)
- 0718941
Post data
No post data.
Query string
No querystring data.
Cookie
To view Cookies, add CookieComponent to Controller
Current Route
- keys(array)
- 0controller
- 1action
- options(array)
- defaultRoute(true)
- defaults(array)
- plugin(null)
- template/:controller/:action/*
==== - Sql Log
-
Timer +
Memory
Peak Memory Use 3.48 MB
Message Memory use Component initialization 1.39 MB Controller action start 1.49 MB Controller render start 2.14 MB View render complete 2.54 MB Timers
Total Request Time: 15 (ms)
Message Time in ms Graph Core Processing (Derived from $_SERVER["REQUEST_TIME"]) 2.71 Event: Controller.initialize 0.02 Event: Controller.startup 0.06 Controller action 2.62 Event: Controller.beforeRender 3.82 » Processing toolbar data 3.74 Rendering View 1.99 » Event: View.beforeRender 0.02 » Rendering APP/View/Cvereves/view.ctp 1.10 » Event: View.afterRender 0.02 » Event: View.beforeLayout 0.02 » Rendering APP/View/Layouts/default.ctp 0.49 » » Rendering CORE/Cake/View/Elements/sql_dump.ctp 0.07 Event: View.afterLayout 0.00 ==== - Log
-
Variables +
View Variables
- cveref(array)
- Cveref(array)
- id718941
- cveinfo_id78836
- name(null)
- cveinfo_nameCVE-2015-1559
- referenceURL:http://seclists.org/fulldisclosure/2015/Feb/30
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- Cveinfo(array)
- id78836
- nameCVE-2015-1559
- statusCandidate
- descriptionMultiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that (1) delete modules via the delete_module parameter, (2) deactivate modules via the deactivate_module parameter, (3) activate modules via the activate_module parameter, (4) delete users via the delete_user parameter, (5) deactivate users via the deactivate_user parameter, (6) activate users via the activate_user parameter, (7) activate themes via the set_theme parameter, (8) deactivate themes via the set_theme parameter, (9) delete themes via the delete parameter, (10) deactivate events (user registration or email activation) via the deactivate_notification parameter, (11) activate events via the activate_notification parameter, (12) delete events via the delete_notification parameter, (13) deactivate language settings via the deactivate_language parameter, (14) activate language settings via the activate_language parameter, (15) delete language settings via the delete_language parameter, or (16) activate or deactivate the autologin feature for a user via a crafted maintenance request.
- phaseAssigned (20150208)
- votesNone (candidate not yet proposed)
- comments(null)
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- Cveref(array)
- $request->data(empty)
- $this->validationErrors(array)
- Cveref(empty)
- Cveinfo(empty)
- Loaded Helpers(array)
- 0Number
- 1SimpleGraph
- 2DebugTimer
- 3Toolbar
- 4Html
- 5Text
- 6Form
- 7Session
- 8HtmlToolbar
==== - cveref(array)
-
Environment +
App Constants
No application environment available.CakePHP Constants
Constant Value APP /virtual/inogo77/public_html/jvn/app/ APP_DIR app APPLIBS /virtual/inogo77/public_html/jvn/app/Lib/ CACHE /virtual/inogo77/public_html/jvn/app/tmp/cache/ CAKE /virtual/inogo77/public_html/jvn/lib/Cake/ CAKE_CORE_INCLUDE_PATH /virtual/inogo77/public_html/jvn/lib CORE_PATH /virtual/inogo77/public_html/jvn/lib/ CAKE_VERSION 2.6.0 CSS /virtual/inogo77/public_html/jvn/app/webroot/css/ CSS_URL css/ DS / FULL_BASE_URL http://inogo77.s500.xrea.com IMAGES /virtual/inogo77/public_html/jvn/app/webroot/img/ IMAGES_URL img/ JS /virtual/inogo77/public_html/jvn/app/webroot/js/ JS_URL js/ LOGS /virtual/inogo77/public_html/jvn/app/tmp/logs/ ROOT /virtual/inogo77/public_html/jvn TESTS /virtual/inogo77/public_html/jvn/app/Test/ TMP /virtual/inogo77/public_html/jvn/app/tmp/ VENDORS /virtual/inogo77/public_html/jvn/vendors/ WEBROOT_DIR webroot WWW_ROOT /virtual/inogo77/public_html/jvn/app/webroot/ PHP Environment
Environment Variable Value Php Version 5.6.40 Phprc php56.ini Php Fcgi Children 1 Pwd /virtual/inogo77/public_html/.fast-cgi-bin Php Fcgi Max Requests 10000 Shlvl 0 Path /usr/local/bin:/usr/bin:/bin Script Name /jvn/app/webroot/index.php Request Uri /jvn/cvereves/view/718941 Query String Request Method GET Server Protocol HTTP/1.1 Gateway Interface CGI/1.1 Redirect Url /jvn/app/webroot/cvereves/view/718941 Remote Port 24195 Script Filename /virtual/inogo77/public_html/jvn/app/webroot/index.php Server Admin [no address given] Context Document Root /virtual/inogo77/public_html Context Prefix Request Scheme http Document Root /virtual/inogo77/public_html Remote Addr 216.73.216.154 Server Port 80 Server Addr 160.251.151.205 Server Name inogo77.s500.xrea.com Server Software Apache Server Signature Http Connection close Http Cache Control max-age=259200 Http X Forwarded For 10.1.14.45 Http Via 1.1 squid-proxy-5b5d847c96-mw4wx (squid/6.10) Http Host inogo77.s500.xrea.com Http Accept Encoding gzip, br, zstd, deflate Http User Agent Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Http Accept */* Gem Home /usr/local/rvm/gems/ruby-2.3.0 Suspectharddos 1 Suspectdos 1 X Dostranslated Ip 216.73.216.154 Mm Country Code US Mmdb Info result found Mmdb Addr 216.73.216.154 Unique Id aJMs5pptzRLBHCxllCeTHQAAATM Redirect Status 200 Redirect Gem Home /usr/local/rvm/gems/ruby-2.3.0 Redirect Suspectharddos 1 Redirect Suspectdos 1 Redirect X Dostranslated Ip 216.73.216.154 Redirect Mm Country Code US Redirect Mmdb Info result found Redirect Mmdb Addr 216.73.216.154 Redirect Unique Id aJMs5pptzRLBHCxllCeTHQAAATM Redirect Redirect Status 200 Redirect Redirect Gem Home /usr/local/rvm/gems/ruby-2.3.0 Redirect Redirect Suspectharddos 1 Redirect Redirect Suspectdos 1 Redirect Redirect X Dostranslated Ip 216.73.216.154 Redirect Redirect Mm Country Code US Redirect Redirect Mmdb Info result found Redirect Redirect Mmdb Addr 216.73.216.154 Redirect Redirect Unique Id aJMs5pptzRLBHCxllCeTHQAAATM Fcgi Role RESPONDER Php Self /jvn/app/webroot/index.php Request Time Float 1754475750.5851 Request Time 1754475750 ==== -
Include +
Included Files
Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
- Cache(array)
- 0CORE/Cache/Cache.php
- 1CORE/Cache/Engine/FileEngine.php
- 2CORE/Cache/CacheEngine.php
- Component(array)
- 0CORE/Controller/Component/SessionComponent.php
- 1CORE/Controller/Component/PaginatorComponent.php
- Config(array)
- 0CORE/Config/routes.php
- 1CORE/Config/config.php
- Controller(array)
- 0CORE/Controller/Controller.php
- 1CORE/Controller/ComponentCollection.php
- 2CORE/Controller/Component.php
- Datasource(array)
- 0CORE/Model/Datasource/CakeSession.php
- 1CORE/Model/Datasource/Database/Mysql.php
- 2CORE/Model/Datasource/DboSource.php
- 3CORE/Model/Datasource/DataSource.php
- Error(array)
- 0CORE/Error/exceptions.php
- 1CORE/Error/ErrorHandler.php
- I18n(array)
- 0CORE/I18n/I18n.php
- 1CORE/I18n/L10n.php
- Log(array)
- 0CORE/Log/CakeLog.php
- 1CORE/Log/LogEngineCollection.php
- 2CORE/Log/Engine/FileLog.php
- 3CORE/Log/Engine/BaseLog.php
- 4CORE/Log/CakeLogInterface.php
- Model(array)
- 0CORE/Model/Model.php
- 1CORE/Model/BehaviorCollection.php
- 2CORE/Model/ConnectionManager.php
- Network(array)
- 0CORE/Network/CakeRequest.php
- 1CORE/Network/CakeResponse.php
- Other(array)
- 0CORE/bootstrap.php
- 1CORE/basics.php
- 2CORE/Core/App.php
- 3CORE/Core/Configure.php
- 4CORE/Core/CakePlugin.php
- 5CORE/Event/CakeEventListener.php
- 6CORE/Event/CakeEvent.php
- 7CORE/Event/CakeEventManager.php
- 8CORE/Core/Object.php
- Routing(array)
- 0CORE/Routing/Dispatcher.php
- 1CORE/Routing/Filter/AssetDispatcher.php
- 2CORE/Routing/DispatcherFilter.php
- 3CORE/Routing/Filter/CacheDispatcher.php
- 4CORE/Routing/Router.php
- 5CORE/Routing/Route/CakeRoute.php
- 6CORE/Routing/Route/PluginShortRoute.php
- Utility(array)
- 0CORE/Utility/Hash.php
- 1CORE/Utility/Inflector.php
- 2CORE/Utility/ObjectCollection.php
- 3CORE/Utility/Debugger.php
- 4CORE/Utility/String.php
- 5CORE/Utility/ClassRegistry.php
- View(array)
- 0CORE/View/HelperCollection.php
- Cache(array)
- app(array)
- Config(array)
- 0APP/Config/core.php
- 1APP/Config/bootstrap.php
- 2APP/Config/routes.php
- 3APP/Config/database.php
- Controller(array)
- 0APP/Controller/CverevesController.php
- 1APP/Controller/AppController.php
- Model(array)
- 0APP/Model/Cveref.php
- 1APP/Model/AppModel.php
- 2APP/Model/Cveinfo.php
- Other(array)
- 0APP/webroot/index.php
- Config(array)
- plugins(array)
- DebugKit(array)
- Component(array)
- 0DebugKit/Controller/Component/ToolbarComponent.php
- Other(array)
- 0DebugKit/Lib/DebugMemory.php
- 1DebugKit/Lib/Panel/HistoryPanel.php
- 2DebugKit/Lib/DebugPanel.php
- 3DebugKit/Lib/Panel/SessionPanel.php
- 4DebugKit/Lib/Panel/RequestPanel.php
- 5DebugKit/Lib/Panel/SqlLogPanel.php
- 6DebugKit/Lib/Panel/TimerPanel.php
- 7DebugKit/Lib/Panel/LogPanel.php
- 8DebugKit/Lib/Panel/VariablesPanel.php
- 9DebugKit/Lib/Panel/EnvironmentPanel.php
- 10DebugKit/Lib/Panel/IncludePanel.php
- 11DebugKit/Lib/DebugTimer.php
- Log(array)
- 0DebugKit/Lib/Log/Engine/DebugKitLog.php
- Component(array)
- DebugKit(array)
====