FICHE CVE

CVE-2005-2059

Publiée le 2005-06-29 · Dernière modification le 2026-06-16

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.

CVSS 3.16.5 MOYENNE

Type de faiblesse

Cross-site request forgery (CSRF) · CWE-352