Secunia

Hamid Ebadi has reported a vulnerability in MegaBBS, which potentially can be exploited by malicious people to disclose sensitive information.

The problem is that it is possible to read other users' private messages by manipulating the "replyid" parameter.

Example:
http://[host]/send-private-message.asp?action=quote&toid=1&replyid=[id]

The vulnerability has been reported in version 2.1 and prior.

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
Hamid Ebadi, Hamid Network Security Team

Changelog
Further details available in Customer Area

Original Advisory
http://www.hamid.ir/security/megabbs.txt

Deep Links
Links available in Customer Area