Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

APBoard Protected Forum Thread Posting Vulnerability

APBoard allows any user to post a thread to a password protected forum. By changing the 'insertinto' value of the new thread posting page to the value of a protected forum, then submitting the page, it is possible to create the thread in a password protected forum.







 

Privacy Statement
Copyright 2009, SecurityFocus