CVE-2007-2338

Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter.

Date published : 2007-04-27

http://www.securityfocus.com/bid/23616

http://www.securityfocus.com/archive/1/466286/100/0/threaded