CVE-2017-1000432

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Vanilla < 2.1.5 - Cross-Site Request Forgery2018-01-08 · webapps · php · Verified

Impact

Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://open.vanillaforums.com/discussion/28337/vanilla-2-1-5-released-and-2-0-18-14
• https://www.exploit-db.com/exploits/43462/
• https://open.vanillaforums.com/discussion/28337/vanilla-2-1-5-released-and-2-0-18-14
• https://www.exploit-db.com/exploits/43462/