CVE-2008-7241

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-17 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout.

Affected products

Punbb: through 1.2.16; 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4 (+17)

References

http://osvdb.org/48685
http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt
http://osvdb.org/48685
http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt

Get alerted when CVE-2008-7241 or the next vulnerability affects your stack