8 matches found
GHSA-WG24-9XM9-593V phpBB Cross-Site Request Forgery (CSRF)
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
phpBB Cross-Site Request Forgery (CSRF)
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
CVE-2019-16107
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
CVE-2019-16107
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
Cross site request forgery (csrf)
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
CVE-2019-16107
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...
Cross-Site Request Forgery(CSRF)
drupal/core is vulnerable to cross-site request forgery CSRF attacks. The library does not carry out form token validation early enough, allowing attackers to run the file upload value callbacks with untrusted input...