high8.8
CVE-2015-9292
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
Impact
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 6kbbs | 6kbbs | Versions 7.1, 8.0 |