Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 26/12/2006 Updated: 17/10/2018

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 585

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote malicious users to delete arbitrary messages as an administrator via a delete operation in an img BBcode tag.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mkportal mkportal 1.1

MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: wwwburnheadit E-mail: info@burnheadit Mkportal website: wwwmkportalit posting [img]?ind=urlobox&op=delete&idurlo=X[/img] in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox page message X will be erased # milw0rm ...

CWE-352 http://secunia.com/advisories/23431 http://www.vupen.com/english/advisories/2006/5115 http://www.securityfocus.com/archive/1/454868/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/2977/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-6741

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect