Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.
Metrics
Affected Vendors & Products
References
History
Fri, 10 Apr 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | CSRF in phpBB 3.3.15 Admin Icon Management Enables Local Code Execution | |
| Weaknesses | CWE-352 CWE-94 |
Fri, 10 Apr 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ariefibis
Ariefibis phpbb3 |
|
| Vendors & Products |
Ariefibis
Ariefibis phpbb3 |
Thu, 09 Apr 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2026-04-09T00:00:00.000Z
Updated: 2026-04-09T14:06:56.837Z
Reserved: 2026-01-09T00:00:00.000Z
Link: CVE-2025-70811
No data.
Status : Received
Published: 2026-04-09T15:16:09.163
Modified: 2026-04-09T15:16:09.163
Link: CVE-2025-70811
No data.