Description
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter.
References
- http://sourceforge.net/project/shownotes.php?release_id=338551
- 15857 third-party-advisory
- 14244 vdb-entry