Description
The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.
References
- ADV-2006-0095 vdb-entry
- http://www.hamid.ir/security/megabbs.txt
- 16168 vdb-entry
- 1015452 vdb-entry
- megabbs-sendprivatemessage-disclosure(24050) vdb-entry
- http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
- 18342 third-party-advisory