CVE-2008-0471 Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action.
MediumCVSS 4.3
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb/phpbb | = 2.0.22 | No fix listed |
References
- bugs.debian.org
- 28630 third-party-advisory vendor-advisory
- 28871 third-party-advisory
- 3585 third-party-advisory
- DSA-1488 vendor-advisory
- 20080123 phpBB 2.0.22 Remote PM Delete XSRF Vulnerability mailing-list