Bug#463589: phpbb2: CVE-2008-0471 XSRF vulnerability exploitable via crafted private message

[Thijs Kinkhorst]

On Friday 1 February 2008 18:08, Nico Golde wrote:
> I tested this sucessfully in a local phpbb2 installation as
> well as on phpbb.de using two test accounts.
>
> If you fix this vulnerability please also include the CVE id
> in your changelog entry.

Thanks Nico, I'll take care of it.


Thijs

pgpdDEKIx8CE1.pgp
Description: PGP signature