CSRF Vulnerability in phpBB Administration Control Panel
CVE-2019-16993

8.8HIGH

Key Information:

Vendor: PHPbb
Status: PHPbb
Vendor: CVE Published:; 30 September 2019

What is CVE-2019-16993?

A cross-site request forgery (CSRF) vulnerability exists in phpBB prior to version 3.1.7-PL1. Specifically, the improper verification of CSRF tokens in the BBCode administration page could allow an attacker to execute unauthorized actions. Should an attacker successfully obtain the session ID of a reauthenticated administrator, they could exploit this vulnerability to execute malicious commands in the context of the administrator's session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch