Description
Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote authenticated users to spoof messages.
References
- 3024 third-party-advisory
- 20070814 Multiple vulnerabilities in Babo Violent 2 2.08.00 mailing-list
- http://aluigi.altervista.org/adv/bv2x-adv.txt