Vulnerabilities > CVE-2006-0139 - Information Disclosure vulnerability in PD9 Software MegaBBS Private Message

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
pd9-software
NVD
Published: 2006-01-09
Updated: 2017-07-20

Summary

The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.

Vulnerable Configurations

Part Description Count
Application
Pd9_Software
2

References