CVE-2008-7192 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 56)
Patch early
A public exploit exists.
Description
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 0.82% — more likely to be exploited than 56% of all CVEs |
| Weakness | CWE-352 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-09-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| woltlab | burning board |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | woltlab burning board 3.0.x - Multiple Vulnerabilities | 2009-03-09 |
References
→ the Explorer · watch your stack · NVD