CVE-2012-0829: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

PT-2012-2891

Name of the Vulnerable Software and Affected Versions Mibew Messenger versions 1.6.4 and earlier Description The issue allows remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences. This can be achieved via the address or threadid...