CSRF in Pbboard

CVE-2012-1216

Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.

Affected products

  • Pbboard — versions 2.1.4
  • N/a — versions n/a

Weakness classification (CWE)

References