medium5.8Public exploit code
CVE-2006-6741
Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete op…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery2006-12-21 · webapps · php · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete operation in an img BBcode tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mkportal | Mkportal | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23431
- http://www.securityfocus.com/archive/1/454868/100/0/threaded
- http://www.vupen.com/english/advisories/2006/5115
- http://secunia.com/advisories/23431
- http://www.securityfocus.com/archive/1/454868/100/0/threaded
- http://www.vupen.com/english/advisories/2006/5115