A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.
中危 CVSS 4.3
摘要
A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://byebydoggy.github.io/post/2025/1231-phpems-csrf-poc/ Exploit
- https://vuldb.com/?ctiid.339325 Permissions Required
- https://vuldb.com/?id.339325 Third Party Advisory
- https://vuldb.com/?submit.728314 Third Party Advisory
时间线
- nvd_ingest NVD