CVE-2019-16993

In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...

PT-2019-14914

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.1.7-PL1 Description The issue concerns improper verification of a CSRF token on the BBCode page in the Administration Control Panel. This could potentially allow for a CSRF attack if an attacker also obtains the sessi...

CVE-2019-16993: Cross-Site Request Forgery (CSRF)

In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...