Security readout for executives and security teams
Plain-English summary
This CVE describes a CSRF flaw in whCMS 0.115 alpha. If an administrator is logged in and is tricked into making a crafted request, attacker-controlled actions could modify credentials through the admin user-save workflow.
Executive priority
Treat this as a targeted legacy-application risk. It is not known to be exploited, but credential modification through an administrator session can create account takeover impact if the obsolete CMS is still exposed.
Technical view
The reported issue is in admin/index.php of whCMS 0.115 alpha. The vulnerable path involves credential modification through a user save action without sufficient CSRF protection. No CVSS score, CWE mapping, fixed version, or detailed affected CPEs are included in the provided sources.
Likely exposure
Exposure appears limited to organizations still running whCMS 0.115 alpha with accessible administrative functionality. The provided affected-product metadata is incomplete, so confirm by software inventory rather than CPE matching alone.
Exploitation context
The bundle does not cite active exploitation, and CISA KEV status is false. The scenario requires an authenticated administrator’s browser context, typically through social engineering or malicious content viewed while logged in.
Researcher notes
Evidence is sparse: the CVE record names whCMS 0.115 alpha and a CSRF condition in admin/index.php, but does not provide scoring, patch status, or comprehensive affected-version data. Avoid assuming broader whCMS versions are affected without vendor confirmation.
Mitigation direction
- Check the HTBridge advisory and vendor guidance for any fixed release or recommended remediation.
- Retire or replace whCMS 0.115 alpha if it remains in use.
- Restrict admin access to trusted networks or VPN users only.
- Ensure credential-changing admin requests require CSRF validation and reauthentication.
- Train administrators to avoid browsing untrusted links while logged into admin panels.
Validation and detection
- Inventory web assets for any whCMS 0.115 alpha deployments.
- Confirm whether admin/index.php is reachable from untrusted networks.
- Review admin credential-change forms for CSRF tokens or equivalent protections.
- Check logs for unexpected administrator credential or user-save changes.
- Verify whether compensating access controls protect the admin interface.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2011-5315 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.htbridge.com/advisory/HTB22767CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.