6.8
CVSSv2

CVE-2008-0788

Published: 15/02/2008 Updated: 20/08/2009
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and previous versions allow remote malicious users to (1) hijack the authentication of moderators or administrators for requests that delete threads via a do_multideletethreads action to moderation.php and (2) hijack the authentication of arbitrary users for requests that delete private messages (PM) via a delete action to private.php.

Affected Products

Vendor Product Versions
MybbMybb1.2.11