MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.
| Software | From | Fixed in |
|---|---|---|
| mybulletinboard / mybulletinboard | preview_release_2_rev_686 | preview_release_2_rev_686.x |