LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre