Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/489294/100/0/threaded | mailing list |
https://exchange.xforce.ibmcloud.com/vulnerabilities/41098 | vdb entry |
http://securityreason.com/securityalert/3739 | third party advisory exploit |