Unrated severityNVD Advisory· Published Apr 27, 2007· Updated Apr 23, 2026
CVE-2007-2338
CVE-2007-2338
Description
Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- secunia.com/advisories/24932nvdPatchVendor Advisory
- securitytracker.com/idnvdExploit
- www.securityfocus.com/bid/23616nvdExploitPatch
- www.waraxe.us/advisory-49.htmlnvdExploitVendor Advisory
- osvdb.org/35061nvd
- securityreason.com/securityalert/2617nvd
- www.phorum.org/story.phpnvd
- www.securityfocus.com/archive/1/466286/100/0/threadednvd
- www.vupen.com/english/advisories/2007/1479nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/34078nvd
News mentions
0No linked articles in our index yet.