CVE-2008-1172 Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messag...
MediumCVSS 4.3
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torrenttrader | = 1.08 | No fix listed |
| torrenttrader classic | = 1.08 | No fix listed |
References
- 3713 third-party-advisory
- 20080303 Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 mailing-list
- torrenttraderclassic-accountinbox-csrf(40981) vdb-entry