Description
message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.
References
- 1006117 vdb-entry
- petitforum-message-auth-bypass(11359) vdb-entry
Published Oct 20, 2007 · Updated Aug 8, 2024 · Assigned by mitre
message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.