A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.
Metrics
Affected Vendors & Products
References
History
Thu, 11 Dec 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0 |
|
| Vendors & Products |
Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0 |
Thu, 11 Dec 2025 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2025-12-11T00:00:00.000Z
Updated: 2025-12-11T16:26:55.449Z
Reserved: 2025-11-18T00:00:00.000Z
Link: CVE-2025-65472
No data.
Status : Received
Published: 2025-12-11T17:15:57.837
Modified: 2025-12-11T17:15:57.837
Link: CVE-2025-65472
No data.