Description
The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
References
- 20021112 APBoard - post threads to protected forums and possibility to hijack forum-password mailing-list
- 6167 vdb-entry
- apboard-protected-forum-bypass(10611) vdb-entry
- 3332 third-party-advisory