Description
add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.
References
- apb-addbookmark-authentication-bypass(11011) vdb-entry
- 20030106 Bookmar4U and Active PHP Bookmarks Vulnerabilities mailing-list
- 6546 vdb-entry