CVE-2006-0139 The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pd9 software megabbs | = 2.0 | No fix listed |
| pd9 software megabbs | = 2.1 | No fix listed |
References
- 18342 exploit patch third-party-advisory vendor-advisory
- 1015452 vdb-entry
- www.hamid.ir exploit patch vendor-advisory
- www.pd9soft.com patch vendor-advisory
- 16168 patch vdb-entry
- ADV-2006-0095 vdb-entry
- megabbs-sendprivatemessage-disclosure(24050) vdb-entry