MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery
| EKU-ID: 10961 | CVE: CVE-2006-6741 | OSVDB-ID: |
| Author: Demential | Published: 2006-12-21 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 10961 | CVE: CVE-2006-6741 | OSVDB-ID: |
| Author: Demential | Published: 2006-12-21 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: info@burnhead.it Mkportal website: http://www.mkportal.it posting [img]?ind=urlobox&op=delete&idurlo=X[/img] in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox page message X will be erased. # milw0rm.com [2006-12-21]