CVE-2015-1432

The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers…

published February 10, 2015

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF attacks and change the full folder setting via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01114 · 65.5th percentile
Published
2015-02-10T17:00Z
EPSS history
Timeline
  • 10 FEB 17:00Z
    The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers…
    cvelistv5