Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpBB Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-16993 - Vulnerability Database
phpBB

phpBB Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-16993

High
Reference: CVE-2019-16993
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-16993
Title: phpBB Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

In phpBB before 3.1.7-PL1 includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting them.