Description
A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PHPEMS | 11.0 | — |
References
- VDB-339325 | PHPEMS cross-site request forgery vdb-entry
- VDB-339325 | CTI Indicators (IOB, IOC) signature permissions-required
- Submit #728314 | PHPEMS <=11.0 Cross-Site Request Forgery third-party-advisory
- https://byebydoggy.github.io/post/2025/1231-phpems-csrf-poc/ exploit