Description
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.
Exploits (1)
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39990
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487139/100/200/threaded
Scores
EPSS
0.0008
EPSS Percentile
23.1%
Details
CWE
CWE-352
Status
published
Products (1)
woltlab/burning_board
3.0.1
Published
Sep 09, 2009
Tracked Since
Feb 18, 2026