FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote malicious users to read private posts via a modified mid parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ilia alshanetsky fudforum 2.6.15 |