Unscored CVE-2016-1175 EUVD-2016-2279GHSA-773p-m7cr-6h5f

Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hij…

Published Apr 5, 2016 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users.

References

JVN#47164236 third-party-advisory
JVNDB-2016-000039 third-party-advisory
http://www.sharp.co.jp/support/photoplayer/fw_update.html