Lucene search
MitreCVELIST:CVE-2019-13376HistorySep 27, 2019 - 12:08 p.m.
CVE-2019-13376
2019-09-2712:08:57
mitre
www.cve.org
phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS
Related
prion
prion
Cross site request forgery (csrf)
2019-09-27 13:15:00
cve
cve
CVE-2019-13376
2019-09-27 13:15:10
CVE-2019-13776
2021-11-02 22:15:08
nvd
nvd
CVE-2019-13376
2019-09-27 13:15:10
CVE-2019-13776
2021-11-02 22:15:08
ubuntucve
ubuntucve
CVE-2019-13376
2019-09-27 00:00:00
osv
osv
CVE-2019-13376
2019-09-27 13:15:10
phpBB Cross-Site Request Forgery (CSRF)
2022-05-24 16:56:59
phpbb3 - security update
2019-10-06 00:00:00
veracode
veracode
Session Token In URL
2019-09-30 03:22:56
Cross-Site Request Forgery (CSRF)
2019-10-01 03:47:01
github
github
phpBB Cross-Site Request Forgery (CSRF)
2022-05-24 16:56:59
openvas
openvas
Debian: Security Advisory (DLA-1942-2)
2019-10-01 00:00:00
phpBB < 3.2.8 Multiple Vulnerabilities
2019-09-23 00:00:00