Bug #852

CSRF issue in usercp2.php

Added by Ryan Gordon about 4 years ago. Updated about 4 years ago.

Status:ClosedStart date:04/06/2010
Priority:NormalDue date:
Assignee:Ryan Gordon% Done:

100%

Category:-
Target version:-
Reproducibility:Always SQA assignments:
Reported In MyBB Version:1.4.11

Description

All of usercp2.php should require a my_post_key to prevent CSRF issues

History

#1 Updated by Ryan Gordon about 4 years ago

  • Status changed from Assigned to Resolved
  • % Done changed from 0 to 100

Applied in changeset r4854.

#2 Updated by Ryan Gordon about 4 years ago

  • Project changed from MyBB to Security Issues
  • Category deleted (Other)
  • Target version deleted (1.4.12)

#3 Updated by Ryan Gordon about 4 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF