CVE-2008-0471

phpBB 2.0.22 - Cross-Site Request Forgery via Private Message Deletion

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28871
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3585
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1488
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28630
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487004/100/0/threaded

Scores

EPSS 0.0063
EPSS Percentile 45.8%

Details

CWE
CWE-352
Status published
Products (1)
phpbb/phpbb 2.0.22
Published Jan 29, 2008
Tracked Since Feb 18, 2026