CVE-2008-7143

MEDIUM · CVSS 6.8 EPSS 1.05%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-7143

Severity

MEDIUM

CVSS

6.8

EPSS

1.05%

Original NVD Description

phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header.