CVE-2008-0472: Woltlab Burning Board

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action.

Affected products

• Woltlab Burning Board: version 2.3.6_pl2 only

Published 2008-01-29. Last modified 2026-06-16.