Unscored CVE-2008-0472 EUVD-2008-0482GHSA-2jwc-65g4-xvmm

Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete thr…

Published Jan 29, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action.

References

wbb-modcp-csrf(39878) vdb-entry
20080123 Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability mailing-list
28634 third-party-advisory
3586 third-party-advisory