CVE-2014-8953: Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote...

Security readout for executives and security teams

This CVE describes CSRF flaws in Php Scriptlerim Who's Who script. An attacker could trick a logged-in administrator into sending unintended administrative requests, including adding an admin account. The sources do not identify affected versions, a CVSS score, or active exploitation. Exposure is likely limited to organizations running Php Scriptlerim Who's Who script, especially where administrator sessions are active and the admin interface is reachable from browsers that can load untrusted content. Affected versions are not specified. Treat this as a targeted legacy-web-app risk. Prioritize investigation if the Who's Who script is present, because administrator compromise could affect site integrity. If the product is not deployed, no action is indicated beyond documentation. Mitigation focus: Confirm whether Php Scriptlerim Who's Who script is deployed anywhere.; Check vendor or maintainer guidance for patches or replacement advice.; Restrict administrator interfaces to trusted networks or VPN access..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.