MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.
Link | Tags |
---|---|
http://secunia.com/advisories/17577/ | third party advisory vendor advisory |
http://marc.info/?l=bugtraq&m=113198945111329&w=2 | mailing list |
http://securityreason.com/securityalert/175 | third party advisory |