CVE-2006-5729

The CVE-2006-5729 entry concerns Yazd Discussion Forum prior to version 3.0 beta, where a mismanaged permission model allows remote authenticated users to (1) reply to a message in an arbitrary forum if they can create a message in any forum, and (2) perform certain unauthorized forum actions due...