CVE-2002-2398 The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| app apboard | = 2.02 | No fix listed |
| app apboard | = 2.03 | No fix listed |
References
- 20021112 APBoard - post threads to protected forums and possibility to hijack forum-password exploit mailing-list
- 3332 exploit third-party-advisory
- apboard-protected-forum-bypass(10611) vdb-entry
- 6167 vdb-entry