CVE-2008-7192: Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and poss...

Security readout for executives and security teams

This CVE describes a CSRF issue in WoltLab Burning Board 3.0.1, possibly other 3.x versions. A victim logged into the forum could be induced to send an unintended request that deletes private messages. The known impact is message deletion, not server takeover. Exposure is likely limited to internet-accessible WoltLab Burning Board 3.0.1 deployments, and possibly other 3.x installations, where users are authenticated and private messaging is enabled. Treat this as a moderate priority for legacy forum platforms. It can cause unauthorized deletion of user private messages, creating trust and data-integrity concerns, but the provided evidence does not indicate system compromise or active exploitation. Mitigation focus: Inventory any WoltLab Burning Board 3.0.1 or 3.x forum installations.; Check WoltLab guidance for fixed versions or supported upgrade paths.; Upgrade or replace affected deployments if vendor guidance confirms exposure..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.