CVE-2019-16531

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• LayerBB < 1.1.4 - Cross-Site Request Forgery2019-09-20 · webapps · php

Impact

LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/154549/LayerBB-1.1.3-Cross-Site-Request-Forgery.html
• https://github.com/0xB9/LayerBB-1.1.3-CSRF/blob/master/README.md
• https://github.com/AndyRixon/LayerBB/compare/1.1.3...1.1.4
• https://github.com/AndyRixon/LayerBB/pull/40
• http://packetstormsecurity.com/files/154549/LayerBB-1.1.3-Cross-Site-Request-Forgery.html
• https://github.com/0xB9/LayerBB-1.1.3-CSRF/blob/master/README.md
• https://github.com/AndyRixon/LayerBB/compare/1.1.3...1.1.4
• https://github.com/AndyRixon/LayerBB/pull/40