Description
MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.
References
- 17577 third-party-advisory
- 20051114 Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) mailing-list
- 175 third-party-advisory