CVE-2015-5660

Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Date published : 2015-10-15

http://extplorer.net/news/18

http://jvn.jp/en/jp/JVN92520335/index.html