The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Apboard | App | 2.02 (including) | 2.02 (including) |
| Apboard | App | 2.03 (including) | 2.03 (including) |