VULNERABILITY INTELLIGENCE
CVE-2008-5672
CVSS score6.8 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2008-12-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)