← Database

CVE-2006-6741

MEDIUM CVSS: 5.8 Published: 2006-12-26 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete operation in an img BBcode tag.

Affected Platforms

Mkportal Mkportal

Weakness Type

CWE-352

References