CVE-2006-6741

Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete operation in an img BBcode tag.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mkportal:mkportal:1.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:23

Type Values Removed Values Added
References () http://secunia.com/advisories/23431 - Vendor Advisory () http://secunia.com/advisories/23431 - Vendor Advisory
References () http://www.securityfocus.com/archive/1/454868/100/0/threaded - () http://www.securityfocus.com/archive/1/454868/100/0/threaded -
References () http://www.vupen.com/english/advisories/2006/5115 - () http://www.vupen.com/english/advisories/2006/5115 -

Information

Published : 2006-12-26 23:28

Updated : 2024-11-21 00:23


NVD link : CVE-2006-6741

Mitre link : CVE-2006-6741

CVE.ORG link : CVE-2006-6741


JSON object : View

Products Affected

mkportal

  • mkportal
CWE
CWE-352

Cross-Site Request Forgery (CSRF)