Description
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
Affected products
- allaire / forums2.0.4 – 2.0.4
- allaire / forums2.0.5 – 2.0.5
- allaire / forums3.0 – 3.0
- allaire / forums3.1 – 3.1