Two vulnerabilities have been reported in Elite Bulletin Board, which can be exploited by malicious users and malicious people to manipulate certain data.

1) An error in Profile.php can be exploited to manipulate various profile information of other users by sending a specially crafted request.

2) An error exists in PM.php that can be exploited by any user to delete any PM messages.

The vulnerabilities are reported in versions prior to 1.0.10.

Solution
Update to version 1.0.10.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118

Deep Links
Links available to Secunia VIM customers