CVE-2008-7192

Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.82% chance of exploitation in the next 30 days, 55th percentile

Published

2009-09-09

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8183

References

• CVE Record
• NVD entry

Related

• CVE-2008-7188
• CVE-2008-7203
• CVE-2008-7185
• CVE-2008-7208
• CVE-2008-7184
• CVE-2008-7209