FUDForum 2.6.15 with Tree View enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Fudforum | Ilia_alshanetsky | 2.6.15 (including) | 2.6.15 (including) |