Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/01/2008 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote malicious users to delete private messages (PM) as arbitrary users via a deleteall action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpbb phpbb 2.0.22

Several remote vulnerabilities have been discovered in phpBB, a web based bulletin board The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of a user by sending them to a crafted web page CVE-2 ...

CWE-352 http://secunia.com/advisories/28630 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589 http://www.debian.org/security/2008/dsa-1488 http://secunia.com/advisories/28871 http://securityreason.com/securityalert/3585 http://www.securityfocus.com/archive/1/487004/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1488

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-0471

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect