Security Advisory
CVE-2007-3592
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields.