2005-03-04 05:00:00
mitre
PUBLISHED
delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.