| Package | Affected versions | Patched versions |
|---|---|---|
| megabbs | = 2.0= 2.1 |
The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free