activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Versatilebulletinboard | Versatilebulletinboard | 0.9.5 (including) | 0.9.5 (including) |
| Versatilebulletinboard | Versatilebulletinboard | 0.9.6 (including) | 0.9.6 (including) |