CVE-2008-7192

Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.
Configurations

Configuration 1 (hide)

cpe:2.3:a:woltlab:burning_board:3.0.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:58

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/487139/100/200/threaded - () http://www.securityfocus.com/archive/1/487139/100/200/threaded -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/39990 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/39990 -

Information

Published : 2009-09-09 19:30

Updated : 2024-11-21 00:58


NVD link : CVE-2008-7192

Mitre link : CVE-2008-7192

CVE.ORG link : CVE-2008-7192


JSON object : View

Products Affected

woltlab

  • burning_board
CWE
CWE-352

Cross-Site Request Forgery (CSRF)