CVE-2008-5672

Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
phparanoidphparanoid
𝑥
≤ 0.3
phparanoidphparanoid
0.1
phparanoidphparanoid
0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/28847
http://sourceforge.net/project/shownotes.php?release_id=575358
https://exchange.xforce.ibmcloud.com/vulnerabilities/40518
http://secunia.com/advisories/28847
http://sourceforge.net/project/shownotes.php?release_id=575358
https://exchange.xforce.ibmcloud.com/vulnerabilities/40518