A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.
History

Thu, 11 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0
Vendors & Products Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0

Thu, 11 Dec 2025 16:30:00 +0000

Type Values Removed Values Added
Description A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-11T00:00:00.000Z

Updated: 2025-12-11T16:26:55.449Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65472

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-11T17:15:57.837

Modified: 2025-12-11T17:15:57.837

Link: CVE-2025-65472

cve-icon Redhat

No data.