Description (CNA)
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.iss.net/security_center/static/7841.php
- http://online.securityfocus.com/archive/1/249026
- http://www.securityfocus.com/bid/3827
- http://www.kb.cert.org/vuls/id/575619
ADP enrichment
No English description supplied.