Unscored CVE-2008-1172 EUVD-2008-1181GHSA-6v5w-89rf-xph4

Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform cert…

Published Mar 6, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages.

References

20080303 Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 mailing-list
torrenttraderclassic-accountinbox-csrf(40981) vdb-entry
3713 third-party-advisory