Description
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
References
- allaire-forums-message-spoofing(7841) vdb-entry
- 20020108 Allaire Forums Vulnerability mailing-list
- 3827 vdb-entry
- VU#575619 third-party-advisory