Description
Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action.
Remediation
References
Related Vulnerabilities
MySQL CVE-2018-2805 Vulnerability (CVE-2018-2805)
WordPress Plugin eHive Account Details Cross-Site Scripting (2.1.2)
Joomla! Core 1.6.x Information Disclosure (1.6.0 - 1.6.3)
WordPress Plugin CKEditor for WordPress Cross-Site Scripting (4.5.3)
Jboss EAP Improper Authentication Vulnerability (CVE-2012-0874)