A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs.
http://www.securityfocus.com/bid/15246
http://www.debian.org/security/2005/dsa-925
http://secunia.com/advisories/18098
Source: Mitre, NVD
Published: 2005-12-22
Updated: 2024-11-21
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
Severity: Medium