Lucene search
Ubuntu.comUB:CVE-2015-1432HistoryFeb 10, 2015 - 12:00 a.m.
CVE-2015-1432
2015-02-1000:00:00
ubuntu.com
ubuntu.com
8
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.4%
The message_options function in includes/ucp/ucp_pm_options.php in phpBB
before 3.0.13 does not properly validate the form key, which allows remote
attackers to conduct CSRF attacks and change the full folder setting via
unspecified vectors.
Bugs
Related
nvd
nvd
CVE-2015-1432
2015-02-10 17:59:01
prion
prion
Cross site request forgery (csrf)
2015-02-10 17:59:00
cvelist
cvelist
CVE-2015-1432
2015-02-10 17:00:00
cve
cve
CVE-2015-1432
2015-02-10 17:59:01
veracode
veracode
Cross-site Request Forgery (CSRF)
2017-07-30 19:44:33
gentoo
gentoo
phpBB: Multiple vulnerabilities
2017-01-11 00:00:00
nessus
nessus
GLSA-201701-25 : phpBB: Multiple vulnerabilities
2017-01-12 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.4%
Related for UB:CVE-2015-1432