Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

phpBB Private Message Deletion Cross-Site Request Forgery

BugsAlert Home > phpBB Private Message Deletion Cross-Site Request Forgery
 
 

NBBN has discovered a vulnerability in phpBB, which can be exploited by malicious people to conduct cross-site request forgery attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.




Original Source: http://secunia.com/advisories/28630/

Learn more about phpBB Private Message Deletion Cross-Site Request Forgery
 
Tags: phpbb private message deletion cross-site request forgery

Related Items

      Linux Kernel "mmap_min_addr" Security Bypass

      FrSIRT - Debian Security Update Fixes ClamAV Denial of Service Vulnerabilities

      CVE-2008-3894 (lenovo_7cetb5ww)

      ADbNewsSender Multiple Vulnerabilities

      Brian King: FOSDEM 2009 Creeping Up - Get Your Talk On

      Django Login Form Cross-Site Scripting Vulnerability

      Bugtraq: Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"

 

Pixel